News for hackers. Stuff that matters.

A comment on Ask HN: How to get aggregated user behaviour without tracking an individual user. Parent comment

Re:Ask HN: How to get aggregated user behaviour without trac... by chatmasta on Wednesday February 13, 2019 @07:37AM (#19152554)
Why do you consider the path of the URL to be any less sensitive than the query parameters? Many websites use dynamic paths that may as well be query parameters.
[ Parent | on HN ]
Re:Ask HN: How to get aggregated user behaviour without trac... by harianus on Wednesday February 13, 2019 @07:54AM (#19152647)
We are going way off topic here, too bad there is not even one answer to my question:

> Do you think this is acceptable from a privacy perspective?

But back to your point. Query params contain usually tokens, search queries, and id's. This is not so much the case for paths. I think you agree with that. But indeed, paths can have sensitive information too.

How would you prevent that data to be sent to my server?

[ Parent | on HN ]
Re:Ask HN: How to get aggregated user behaviour without trac... by chatmasta on Wednesday February 13, 2019 @08:08AM (#19152718)
Maybe you should allow the user to provide some sort of regex mask on URLs, or some sort of rule engine for which parts to keep or strip.
[ Parent | on HN ]