EU government websites have undisclosed adtech trackers from Google and others

Re:EU government websites have undisclosed adtech trackers f... by derefr on Monday March 18, 2019 @05:57PM (#19425745)

The GP commenter makes it clear that the CSV file is written to on the server-side (using PHP) as a consequence of request handling, not on the client side. There is no place that the CSV URL is visible, other than in the PHP source (that clients cannot access) and in the Google Sheet (which is presumably internal to the GP's GSuite domain.)

It's security-by-obscurity, maybe (as all public "secret token" URLs are) but it's better than what you're implying.

[ Parent | on HN ]

Re:EU government websites have undisclosed adtech trackers f... by im3w1l on Monday March 18, 2019 @07:51PM (#19426562)

fwiw I was able to find the csv as well.

EDIT: You are right in theory though.

[ Parent | on HN ]

Re:EU government websites have undisclosed adtech trackers f... by pcnix on Tuesday March 19, 2019 @04:04AM (#19428912)

As a learning exercise, I tried to find it too, but I wasn't able to get it from the domain in the js file, could you explain how you got to the final file?

This is strictly as a learning exercise, no malicious intent on my part.

[ Parent | on HN ]

Re:EU government websites have undisclosed adtech trackers f... by lightbyte on Tuesday March 19, 2019 @09:10AM (#19430411)

I was able to quickly get the CSV file as well.

The javascript is located at SITE/counter.js

My first guess for the CSV was SITE/counter.csv

It worked.

[ Parent | on HN ]