Trackers in iframes

[sidd]

I just discovered from Mr. Budmantis comment that you can inject an transparent iframe into a comment and tracking elements like facebook, twitter and G+.

See e.g the first post on the thread "Who should be the Democratic nominee for President in 2020?"

if you do a view source you see the iframe element with src from facebook
and visible link to twitter and G+, at least the latter two don't hide. Those are straight to twitter and G+ with script executing from those sources.

Is that a good idea ? All these guys  build a shadow profile of you _even if you don't use their platforms_

Do I have to resort to drastic measure on this site as well ? Well i guess so after seeing the transparent iframe

sidd

[Neven]

I haven't seen something like that before, and I don't know how those buttons got in either.

I'm also not a fan of 'social' media, because of the fake news and subsequent arbitrary censoring, but maybe there's no way to get anything done without them.

[gerontocrat]

I haven't seen something like that before, and I don't know how those buttons got in either.

I'm also not a fan of 'social' media, because of the fake news and subsequent arbitrary censoring, but maybe there's no way to get anything done without them.

DUNGEON-MASTER- HELP!?

[Neven]

I found it. Sorry for not noticing and then taking care of this earlier.

[A-Team]

budmantis  Today at 12:40:46 PM
Didn't knowingly insert that, very annoying! How do I get rid of it?

It's inserted in every opening post. I'll see if I can get rid of it as admin.

Hmmm, can you take a screenshot of what this looked like?

In every opening post? That sounds like the keepers of our "free" forum software took a dive. Disturbing if they took an unannounced payment, did not notify administrators, and did not make a spyware "feature" opt-in. Ethically unacceptable. It could affect thousands of other sites.

Here is another possible instance of someone unintentionally pasting in a tracker:

[ivica]

A-Team,

A few hours earlier checking 1st post in Arctic Café thread I saw:
Row for icons appended below signature row/line. Two icons were there, Twitter / G+.

Checking it recently for you:
Surplus row is not there anymore, Neven apparently checked off that.

However, something strange happened - noticed never before:

Dialog like on attached pic but w/o Prevent... check box popped up.
Pressing Enter with empty "edit field" dialog reappeared, now with Prevent... check box.

Pressing Enter again dialog do not reappears.

Service count (right-up corner of the browser window) says: 5.

Testing done using Tor Browser v. 7.0.10.

After preparing pic for you, attempt to recreate the issue failed:
No dialog appears, Service count is still 5, possibly something like this:
"
Force encrypted connections to these websites:
   YouTube
   Google APIs
   Google.com Subdomains (Complex)
   Google
   Google Services      
"
--ivica

[Neven]

Okay, this is already going over my head, I just unchecked a couple of boxes in the admin section (see below). If you guys manage to figure anything out, let me know in the simplest of terms and I'll see if anything more needs to be done by using my red phone connection to DungeonMaster.

[ivica]

I like them (all 4) being unchecked

Humanity desperately needs options other then corporately controlled google, youtube, social networks. 

[A-Team]

this is already going over my head, I just unchecked a couple of boxes

Why did i ever let go of my 1980 Honda Civic wagon, what was I thinking??? No tracking, no hacking, no engine warning lights -- that car practically drove itself.

"They" say some millennials actually want to be tracked, profiled and targeted with ads. It seems the more you shop, the more you save.

our new "smart" thermostat, the Ecobee4 ...It's way cool!

-Touch screen. wifi enabled, connects to internet to retrieve current weather and weather forecast
-can be controlled remotely with Android phone app
-comes with an extra room sensor to monitor temp in other rooms (the thermostat can be set to an average temp)
-sensor can sense occupancy so it can heat the house according to what her particular rooms are empty or occupied
-has Amazon Alexa assistant built in so we can access all that stuff with voice control, it can play music, news, and all that cool stuff
-will integrate with and allow us to voice control smart wifi dimmer switches for the lights
-it pays attention to outside temps and adjusts according to the seasons when adjust room temp (i.e., in winter it will start heating sooner to have the temp 67 by 6pm, whereas in summer time it would take less time to get up to temp by 6pm)
-and lots of other cool stuff I'm still learning about
- They claim it reduces the average home heating bill by 23%!It's usually sells for $249, but last week was on sale for 209, plus I found a $40 off $200 coupon for Lowe's .com.  Combined with a $50 Oregon Energy Trust rebate, it came in at just under $120!