[ ijbswa-Actionsfile feedback-3421764 ] facebook trackers

Actionsfile feedback item #3421764, was opened at 2011-10-11 05:01
Message generated for change (Comment added) made by dstahlke
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=460288&aid=3421764&group_id=11118

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: filter: other problem
Group: None
>Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: dan stahlke (dstahlke)
Assigned to: Fabian Keil (fabiankeil)
Summary: facebook trackers

Initial Comment:
Maybe some people like having Facebook's "like" button and "who likes" panes on various pages (e.g. on arstechnica.com) but I consider it to be a tracker.  The rule below blocks all of the Facebook stuff on the pages I have looked at, and doesn't seem to affect the performance of Facebook.

{+block{Facebook "like" trackers.}}
www.facebook.com/(extern|plugins)/(login_status|like|likebox|activity).php


----------------------------------------------------------------------

>Comment By: dan stahlke (dstahlke)
Date: 2011-10-19 05:21

Message:
>From arstechnica:

Oct 19 09:10:27.073 7f399cff9700 Request:
www.facebook.com/plugins/likebox.php?href=http%3A%2F%2Ffacebook.com%2Farstechnica&width=300&colorscheme=light&show_faces=false&stream=false&header=false&height=62&border_color=%23FFFFFF
Oct 19 09:10:27.142 7f399cff9700 Request:
www.facebook.com/plugins/activity.php?site=arstechnica.com&width=300&height=370&header=false&colorscheme=light&recommendations=false&border_color=%23FFFFFF

>From a wsj.com story:

Oct 19 09:16:33.450 7f39c77fe700 Request:
www.facebook.com/dialog/oauth?api_key=368513495882&app_id=368513495882&channel_url=http%3A%2F%2Fstatic.ak.fbcdn.net%2Fconnect%2Fxd_proxy.php%3Fversion%3D3%23cb%3Df24cac4af%26origin%3Dhttp%253A%252F%252Fonline.wsj.com%252Ff1b037e354%26relation%3Dparent.parent%26transport%3Dpostmessage&client_id=368513495882&display=none&locale=en_US&origin=1&redirect_uri=http%3A%2F%2Fstatic.ak.fbcdn.net%2Fconnect%2Fxd_proxy.php%3Fversion%3D3%23cb%3Df1d0dc2abc%26origin%3Dhttp%253A%252F%252Fonline.wsj.com%252Ff1b037e354%26relation%3Dparent%26transport%3Dpostmessage%26frame%3Df3597606cc&response_type=token%2Csigned_request%2Ccode&sdk=joey
Oct 19 09:16:33.933 7f39e89f3700 Request:
www.facebook.com/plugins/fan.php?api_key=368513495882&connections=10&height=250&id=8304333127&locale=en_US&sdk=joey&stream=false&width=377
Oct 19 09:16:33.940 7f39d8ff9700 Request:
www.facebook.com/plugins/like.php?api_key=368513495882&channel_url=http%3A%2F%2Fstatic.ak.fbcdn.net%2Fconnect%2Fxd_proxy.php%3Fversion%3D3%23cb%3Df13997452c%26origin%3Dhttp%253A%252F%252Fonline.wsj.com%252Ff1b037e354%26relation%3Dparent.parent%26transport%3Dpostmessage&extended_social_context=false&href=http%3A%2F%2Fonline.wsj.com%2Farticle%2FSB10001424052970204485304576640791304008536.html&layout=button_count&locale=en_US&node_type=link&ref=wsj_share_FB&sdk=joey&send=false&show_faces=false&width=90

So it seems there are a wide variety of URLs associated with facebook.  I
didn't even list "plugins/fan.php" or "dialog/oauth" in my bug report
above, although they show up on WSJ pages.  I don't remember what pages
produced examples for "login_status.php".


----------------------------------------------------------------------

Comment By: Fabian Keil (fabiankeil)
Date: 2011-10-16 05:53

Message:
Thanks for the report.

Nowadays Privoxy's default configuration isn't supposed to cause too many
problems, so I'm not sure if blocking these URLs by default would be a good
idea.

Putting the section inside a comment in user.action as a suggestion
shouldn't be a problem, though.

Eventually we should probably think about adding another action file with
more aggressive site-specific sections. Added as TODO list item #99.

Can you provide example URLs for regression testing?

On arstechnica.com I only see:
http://www.facebook.com/plugins/likebox.php?href=http%3A%2F%2Ffacebook.com%2Farstechnica&width=300&colorscheme=light&show_faces=false&stream=false&header=false&height=62&border_color=%23FFFFFF
and
http://www.facebook.com/plugins/activity.php?site=arstechnica.com&width=300&height=370&header=false&colorscheme=light&recommendations=false&border_color=%23FFFFFF

But given that they are inside mysterious <iclint> tags they don't seem to
be actually requested.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=460288&aid=3421764&group_id=11118

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2d-oct