News for hackers. Stuff that matters.
Re:Unverified vanity URLs and interest tracking catalyze fra... by lcnPylGDnU4H9OF on Monday January 08, 2024 @04:51PM (#38918706)
I used to get emails from a particular recruiter which would include a link to a job listing on their employer's website. I'd always remove some extraneous tracking information from it, landing on a single identifier which I believe was unique to me but still showed the job listing.

I believe the job-listing identifier was always unique because I eventually got an email from this recruiter which instead contained a bit.ly link, presumably because it rendered me unable to remove the tracking information. I did not click on that link. That was also the last email I received from that person, cementing the idea in my mind that he was "on to me" affecting their recruitment analytics.

Sometimes I think back on that time and smile, knowing that I caused some difficulty -- however small -- for someone working in business intelligence with my dumb anti-tracking antics. Admittedly, they did successfully track some of my behavior but they had to do it manually with a human thinking critically so I'll call it a win.

Anyway, the point of the story is that I didn't click the URL-shortened link because they're shady AF and often used for the specific purpose of hiding details about the URL. Tracking is a rather benign "abuse" of this but there are other practical concerns with malicious domains.

Re:Unverified vanity URLs and interest tracking catalyze fra... by dylan604 on Monday January 08, 2024 @05:00PM (#38918806)
It's funny to me that a 140 char limit to a post drove the wide use of URL shortening services to the point people just accept them as normal.
Re:Unverified vanity URLs and interest tracking catalyze fra... by nocoiner on Monday January 08, 2024 @05:12PM (#38918968)
I think this was mostly just my personal slightly-paranoid aversion to political risk, but it always astounded me that someone was willing to use the Libyan TLD during the days of Gaddafi to build a link-shortening business.
Re:Unverified vanity URLs and interest tracking catalyze fra... by seszett on Tuesday January 09, 2024 @04:02AM (#38923883)
> during the days of Gaddafi

Well, although a rather harsh dictatorship, Libya was at the time one (bit.ly was registered in 2008) of the more stable and prosperous countries of the region, and had been normalizing its international relations for some time. That was just after he had been received in France, erecting his tent on the lawn of the state guesthouse next to the French presidential palace.

I don't think many people expected the dramatical events that occurred soon after.

But it's true, I personally think one should never use the TLD of a dictatorship or unstable country for obvious ethical reasons and for future-proofing a business.

Re:Unverified vanity URLs and interest tracking catalyze fra... by nocoiner on Tuesday January 09, 2024 @02:41PM (#38930898)
Yes, this is an excellent point. I guess I’m old enough where I primarily associate Gaddafi with “mercurial dictator” than the chaos after he was toppled. And 100% agree with your last paragraph.

Cool visualizations on your site, by the way.

Re:Unverified vanity URLs and interest tracking catalyze fra... by ehPReth on Monday January 08, 2024 @11:25PM (#38922309)
fun trick with bit.ly (and bit.ly-hosted shorteners): add a + to the end of the URL to see where it leads. in past times you could also see stats, but they killed that :/
Re:Unverified vanity URLs and interest tracking catalyze fra... by guessmyname on Tuesday January 09, 2024 @04:26AM (#38924026)
> bit.ly/FOOBAR+

That, or add “.info” at the end, e.g. goo.gl/FOOBAR.info

Many other URL shorteners copied Google and Bitly’s approach so adding “+” or “.info” at the end of short URLs usually reveals the hidden redirection without hitting the final website.

Re:Unverified vanity URLs and interest tracking catalyze fra... by DeathArrow on Tuesday January 09, 2024 @03:30AM (#38923718)
Even a simple link like site.com/jobs/id can be used for tracking as id can contain both the job ID and a person's ID.
Re:Unverified vanity URLs and interest tracking catalyze fra... by lcnPylGDnU4H9OF on Tuesday January 09, 2024 @06:52AM (#38925047)
Yeah, I’m pretty sure that was the case. There was always a redirect to the job posting which had a different identifier in the end URL. I didn’t expect to have an effect on their analytics; it was just gravy that I seemed to.
Re:Unverified vanity URLs and interest tracking catalyze fra... by nyanpasu64 on Tuesday January 09, 2024 @06:20AM (#38924825)
On Firefox you could set network.http.redirection-limit to 0, and check the response headers in F12 for the redirect target (which the browser doesn't load for you).
Re:Unverified vanity URLs and interest tracking catalyze fra... by caseyh on Tuesday January 09, 2024 @08:26AM (#38925902)
Or use curl.