News for hackers. Stuff that matters.
Re:iOS 17 automatically removes tracking parameters from lin... by anandnair on Thursday June 08, 2023 @12:25PM (#36244527)
I don't think there is a foolproof way to tackle this.
Re:iOS 17 automatically removes tracking parameters from lin... by dinobones on Thursday June 08, 2023 @12:49PM (#36244902)
Yeah this is a very naive and somewhat potentially harmful measure. Think of all the old .asp and .php websites that basically route you to a page by just throwing a big old fat query string into the URL.

The way this can be bypassed is:

Before: mylink.mydomain?tracking_id=abc123 After: mylink.mydomain/home/abc123/

Yeah, it might wreck SEO. But if you're really trying to track users and see who clicked on your email or whatever, it's probably the case that you don't care about SEO in this specific case.

Re:iOS 17 automatically removes tracking parameters from lin... by ezfe on Thursday June 08, 2023 @12:55PM (#36245016)
It doesn't blanket-remove query parameters
Re:iOS 17 automatically removes tracking parameters from lin... by indymike on Thursday June 08, 2023 @01:41PM (#36245723)
It breaks the web. There are literally no real rules on how you use them, so you have a lot of things that will be confused with tracking (gclid,clickid,campaign, etc). Even stuff that was originally tracking gets re-used. I've worked on systems where utm_medium=web and utm_keyword=socks were used to literally query the landing page for the user and effectively were the U in URL.
Re:iOS 17 automatically removes tracking parameters from lin... by dinobones on Thursday June 08, 2023 @01:25PM (#36245485)
I mean presumably they have some decent heuristic for what are "user-identifiable" parameters.

But I don't trust that heuristics works for every query parameter for every website on the internet.

Here's one: Imagine you run a small website and send signup confirmation emails. Suddenly, 20-30% of your users can no longer complete signups and you have no idea why. Oh yeah, our URL is:

mysite.foo/signup?uid=139191238123.

And apple filtered out the uid parameter.

Re:iOS 17 automatically removes tracking parameters from lin... by joenathanone on Thursday June 08, 2023 @01:51PM (#36245860)
This is exactly what I am afraid of, we use url query parameters heavily to prefill forms for our employees and clients, think online training and service agreements. This will break a lot of our operation.
Re:iOS 17 automatically removes tracking parameters from lin... by alvarezbjm-hn on Thursday June 08, 2023 @04:07PM (#36248054)
"This will break a lot of our operation"

》 For safari users 》 Until apple own the internet so the site is forced to adapt.

Re:iOS 17 automatically removes tracking parameters from lin... by coldpie on Thursday June 08, 2023 @01:00PM (#36245093)
There is some kind of blanket-remove bug with bookmarks. Try bookmarking a URL with query parameters in Safari on iOS. I don't know if it happens with every URL, but with this one[1] specifically, it drops the query parameter from the bookmark. You have to go add it in manually by editing the bookmark afterwards. I wonder if it's motivated by the same kind of change as this article is about, or if it's a separate bug. (I haven't tested this recently, but it was true as of late last year.)

[1] https://www.twintown.com/collections/acoustic-guitars?sort_b...

Re:iOS 17 automatically removes tracking parameters from lin... by LukeLambert on Thursday June 08, 2023 @01:13PM (#36245299)
That's likely due to the page having a canonical URL meta tag:

  <link rel="canonical" href="https://www.twintown.com/collections/acoustic-guitars"/>
Re:iOS 17 automatically removes tracking parameters from lin... by v8xi on Thursday June 08, 2023 @02:10PM (#36246168)
If companies try to hash the direct and referral link into a single link (or use a redirect link). Apple could visit the site internally, return the actual, tracking-free webpage, and forward that to the user. This would mean the referral link is actually just tracking how many times Apple decodes it and would devalue the use of a referral link since it would just be reporting "how many times this link was forwarded" and not "how many times this link was clicked"
Re:iOS 17 automatically removes tracking parameters from lin... by function_seven on Thursday June 08, 2023 @04:25PM (#36248406)
Yup. Same way Gmail neutered tracking pixels in emails back in the day. They open each one as soon as the email is received, rather than when the recipient opens it.
Re:iOS 17 automatically removes tracking parameters from lin... by polyomino on Thursday June 08, 2023 @04:25PM (#36248410)
Why do the people even want the internet anyways, they like getting everything from apple
Re:iOS 17 automatically removes tracking parameters from lin... by jensensbutton on Thursday June 08, 2023 @04:56PM (#36248894)
That is a MUCH larger investment than shipping some client side code though.