RetroFed Forum
Your home away from modern life.
YSK sharing a YouTube video could be revealing your identity
Post Reply
AuthorMessage
x0x7 lemmy.world x0x7@lemmy.world
Joined: 2024-03-06
#52 · Quote Reply

On my forum, youtube links get stripped of any extra url parameters. Every site should have to do that.

14
WesternInfidels feddit.online WesternInfidels@feddit.online
Joined: 2026-01-29
#53 · Quote Reply

They might be talking about the default web interface.

That's what I use!

3
black0ut pawb.social black0ut@pawb.social
Joined: 2023-06-10
#54 · Quote Reply

As a web developer, everything after the ? is actually parameters for the request. Anything could be in there, even important stuff (though hopefully nothing identifying, since that is extremely unsecure). You will likely break functionality if you delete everything without knowing what it is.

Usually parameters are easy to understand. Like the time parameter in yt URLs, which is t=180 (meaning 180 seconds from the beginning of the video). Usually, parameters that are a string of seemingly random letters are UIDs or tracking parameters. Whenever I see a URL with one or multiple of those, I start deleting them and seeing if the URL still works. In 90% of the cases, it still does. Amazon is one of the worst offenders, with usually 4 or 5 random looking parameters that can be deleted without affecting the functionality of the URL.

5
LCP lemmy.world lazycouchpotato@lemmy.world
Joined: 2023-06-16
#55 · Quote Reply

Is

I've seen YT links with both si and is.

2
master_of_unlocking piefed.zip master_of_unlocking@piefed.zip
Joined: 2025-09-17
#56 · Quote Reply

I've seen YT links with both si and is.

Yeah I’ve only seen si but that’s good to know

3
master_of_unlocking piefed.zip master_of_unlocking@piefed.zip
Joined: 2025-09-17
#57 · Quote Reply

i would be surprised if it is true that "If you don’t remove that it shows your personal account to anyone who receives it so that they can chat directly with you", and a search just now didn't find anything to substantiate that. It’s a very recent change is it though? if so, how do you actually find out the profile name from the si parameter? obviously tracking parameters from URLs should be r...

I’ve seen it when opening shared links in the browser but it’s possible that you need to be logged in for it to show

3
Null User Object lemmy.world nulluser@lemmy.world
Joined: 2023-06-08
#58 · (edited) Quote Reply

On my forum, youtube links get stripped of any extra url parameters. Every site should have to do that.

That's a great extra layer of protection, but people shouldn't rely on it and get/stay in the habit of always removing the tracking code themselves.

10
this sh.itjust.works this@sh.itjust.works
Joined: 2023-06-05
#59 · Quote Reply

It can't share my personal account if I'm never signed in.

2
kent_eh lemmy.ca kent_eh@lemmy.ca
Joined: 2023-06-06
#60 · Quote Reply

[deleted]

You can turn location tagging off globally

That's one of the first things I did when configuring my kids phones.

3
XeroxCool lemmy.world XeroxCool@lemmy.world
Joined: 2023-06-17
#61 · Quote Reply

I don’t see how it’s a generational thing. People who grew up when smartphones were already a thing might never have needed to learn how the Internet and URLs actually work. To a lot of everyday users nowadays, the Internet is just a series of smartphone or tablet apps you switch between. I used to think that the spread of the Internet into more segments of society would create a society of com...

Sample the people around you in real life. They don't know any better, regardless of age. The group that experienced it has already largely forgotten it because the link purpose got obfuscated and the need became obsolete in everyday use

1
anon_8675309 lemmy.world anon_8675309@lemmy.world
Joined: 2023-09-01
#62 · Quote Reply

[deleted]

I have an iOS shortcut that remove exit meta data.

3
chunes lemmy.world chunes@lemmy.world
Joined: 2025-04-08
#63 · Quote Reply

til people don't reflexively strip out everything after the ? unless you know exactly what it's doing

22
Rimu piefed.social rimu@piefed.social
Joined: 2024-01-04
#64 · Quote Reply

Is that so? Edit: I posted this from PieFed, and it preserved the "?si=" part of the URL, which I have since edited out by hand. This one I loaded from a private-browsing tab. The URL includes the tracking ID but it may not be connected to me.

It doesn't do it in comments, just when you make a post.

6
XeroxCool lemmy.world XeroxCool@lemmy.world
Joined: 2023-06-17
#65 · Quote Reply

People can't even unanimously agree on when each generation starts and ends (see terms like "zillenial" or "xillenial") so I'd even go so far as to say it's a completely redundant concept in the colloquial sense. Obviously most people care more about continuing to use the "kids these days" rhetoric so it hardly matters regardless, but it doesn't make it any less ridiculous.

Blurry deliberations are typical. As time goes on, "millennial" will become more accurate as the differences between xennial and zillennial become smaller and smaller in comparison to differences between _ennial and alpha or beta or delta. I just take issue with acting like direct url interface was the experience of a generation, and not a short-lived blip for the gen pop that has already been forgotten, especially as full url purpose has shifted to something arguably evil.

1
aedaz lemmy.zip Aedaz_@lemmy.zip
Joined: 2026-07-15
#66 · Quote Reply

Not sure if my anxiety is justified here, but I am not tech savvy whatsoever. And I worry about all the things I’m doing that’s probably completely giving myself away that I’m just unaware of. I didn’t know about this at all.

8
Saltarello lemmy.world Saltarello@lemmy.world
Joined: 2023-07-02
#67 · Quote Reply

If it helps, for Androids share YT link to something like Untracker to remove unwanted nonsense from the url which you can then pass on safely (also works for things such as Amazon links).

For images, share to something such as Imagepipe first to remove location data. Other apps such as Aves Libre gallery or image Toolbox also strip this data but Imagepipe is simple - share image to it & it passes the image directly to your messaging app after stripping the data

3
mrgoosmoos lemmy.ca mrgoosmoos@lemmy.ca
Joined: 2025-03-24
#68 · Quote Reply

til people don't reflexively strip out everything after the ? unless you know exactly what it's doing

tbf, it's intentionally designed to be malicious and deceiving

21
mrgoosmoos lemmy.ca mrgoosmoos@lemmy.ca
Joined: 2025-03-24
#69 · Quote Reply

Not sure if my anxiety is justified here, but I am not tech savvy whatsoever. And I worry about all the things I’m doing that’s probably completely giving myself away that I’m just unaware of. I didn’t know about this at all.

pretty much everything that has a "share" button does this. it's not to help you share the link more easily than copying from the address bar - it's to harvest your data

5
mrgoosmoos lemmy.ca mrgoosmoos@lemmy.ca
Joined: 2025-03-24
#70 · Quote Reply

As a web developer, everything after the ? is actually parameters for the request. Anything could be in there, even important stuff (though hopefully nothing identifying, since that is extremely unsecure). You will likely break functionality if you delete everything without knowing what it is.

if it's obfuscated, then it's assumed to be malicious

3
∃∀λ programming.dev eah@programming.dev
Joined: 2025-07-09
#71 · Quote Reply

The frequency with which I've seen the si attribute included in youtube links has made me painfully aware of just how many people are not using the internet the same way I do; they're experiencing the internet through a handful of mobile apps, not through a web browser on the desktop.

34
some_kind_of_guy lemmy.world some_kind_of_guy@lemmy.world
Joined: 2025-07-14
#72 · Quote Reply

The frequency with which I've seen the si attribute included in youtube links has made me painfully aware of just how many people are not using the internet the same way I do; they're experiencing the internet through a handful of mobile apps, not through a web browser on the desktop.

Even then.. what proportion of people do you think know the parts of a URL? Or know what a URL even is...

You may be in a bubble, friend

9
binux sh.itjust.works binux@sh.itjust.works
Joined: 2026-05-11
#73 · Quote Reply

Blurry deliberations are typical. As time goes on, "millennial" will become more accurate as the differences between xennial and zillennial become smaller and smaller in comparison to differences between _ennial and alpha or beta or delta. I just take issue with acting like direct url interface was the experience of a generation, and not a short-lived blip for the gen pop that has already been ...

Blurry deliberations are typical.

Yes, though my point that I wanted to add is that people seem to treat generational terms as if they’re a fact of reality instead of a very shaky conceptualization of cultural differences between birth groups that are already influenced by a lot more factors than just when people are born. It’s much more of a spectrum than a strict range of demographics inherent to humanity.

2
lyrial anarchist.nexus lyrial@anarchist.nexus
Joined: 2026-04-29
#74 · (edited) Quote Reply

tbh I would still prefer receiving the raw youtube link so everybody can redirect it to their preferred way of watching e.g. Morphee. Invidious instances can go down or stop working.
[deleted]
3
Buddahriffic lemmy.world Buddahriffic@lemmy.world
Joined: 2023-06-30
#75 · Quote Reply

pretty much everything that has a "share" button does this. it's not to help you share the link more easily than copying from the address bar - it's to harvest your data

Even voyager gives a link to vger.to when you hit share instead of a direct link to the thing you want to share. No idea what they are doing with it (other than trying to redirect it to the app). Maybe it's set up to just use the localhost and that's all it does, but I usually strip that part out because I have no idea either way.

4
Buddahriffic lemmy.world Buddahriffic@lemmy.world
Joined: 2023-06-30
#76 · Quote Reply

That's a great extra layer of protection, but people shouldn't rely on it and get/stay in the habit of always removing the tracking code themselves.

Yeah, it's easily possible to set it up to save the original link somewhere hidden. Same reason why you shouldn't reuse passwords because it's trivial to set up a site to look like it's doing it right from the outside but actually saves all passwords in plaintext for owners, admins, or disgruntled staff to look at later and see if it logs in to your email.

2
Druid lemmy.zip v4ld1z@lemmy.zip
Joined: 2023-06-11
#77 · Quote Reply

I remember telling this to people on reddit and getting downvoted to oblivion while redditors squawked "who tf cares bro"

fitting

4
tigeruppercut lemmy.zip tigeruppercut@lemmy.zip
Joined: 2023-08-20
#78 · (edited) Quote Reply

I remember telling this to people on reddit and getting downvoted to oblivion while redditors squawked "who tf cares bro"

I first heard about it on reddit but it was before the API exodus, so...

4
BigDiction lemmy.world BigDiction@lemmy.world
Joined: 2023-06-20
#79 · Quote Reply

The frequency with which I've seen the si attribute included in youtube links has made me painfully aware of just how many people are not using the internet the same way I do; they're experiencing the internet through a handful of mobile apps, not through a web browser on the desktop.

Traffic is roughly 70-80% mobile on most websites I know.

2
asmr feddit.nl asmr@feddit.nl
Joined: 2023-06-19
#80 · Quote Reply

Since 4 March 2026 I am seeing "is=" in some YouTube links instead of "si=", also with the 16 character ID.

9
🇰 🌀 🇱 🇦 🇳 🇦 🇰 🇮 pawb.social Kolanaki@pawb.social
Joined: 2024-10-06
#81 · Quote Reply

Even then.. what proportion of people do you think know the parts of a URL? Or know what a URL even is... You may be in a bubble, friend

I know all this stuff and even I don't look at the technical stuff in the URL. I just make sure it doesn't have dQw4w9WgXcQ in there.

7
asmr feddit.nl asmr@feddit.nl
Joined: 2023-06-19
#82 · Quote Reply

I remember telling this to people on reddit and getting downvoted to oblivion while redditors squawked "who tf cares bro"

We set up a bot on r/asmr to reply to anyone posting a YouTube link containing the "si=" parameter, warning that it was likely a tracking ID that Google could potentially use to tie their YouTube account to their Reddit account with some degree of probability and suggesting that they delete their post and re-post without the si= parameter. Many were grateful for the warning and info but some didn't care. We decided to disable the warning after a few weeks.

6
Zedd_Prophecy lemmy.world Zedd_Prophecy@lemmy.world
Joined: 2023-06-22
#83 · Quote Reply

Not sure if my anxiety is justified here, but I am not tech savvy whatsoever. And I worry about all the things I’m doing that’s probably completely giving myself away that I’m just unaware of. I didn’t know about this at all.

It is . But now you know . Don't freak - and you might even learn how to install a privacy based browser, vpn, or operating system. Keep the tinfoil har dude and best of luck

3
aedaz lemmy.zip Aedaz_@lemmy.zip
Joined: 2026-07-15
#84 · Quote Reply

It is . But now you know . Don't freak - and you might even learn how to install a privacy based browser, vpn, or operating system. Keep the tinfoil har dude and best of luck

I do use a VPN, but tha'ts about it.

1
asmr feddit.nl asmr@feddit.nl
Joined: 2023-06-19
#85 · Quote Reply

Usually parameters are easy to understand. Like the time parameter in yt URLs, which is t=180 (meaning 180 seconds from the beginning of the video). Usually, parameters that are a string of seemingly random letters are UIDs or tracking parameters. Whenever I see a URL with one or multiple of those, I start deleting them and seeing if the URL still works. In 90% of the cases, it still does. Amaz...

t= is the only useful parameter in YouTube URLs (that I know of). If not for that we could just strip all of the parameters out.

1
Blah463 thelemmy.club Blah463@thelemmy.club
Joined: 2026-07-03
#86 · Quote Reply

The frequency with which I've seen the si attribute included in youtube links has made me painfully aware of just how many people are not using the internet the same way I do; they're experiencing the internet through a handful of mobile apps, not through a web browser on the desktop.

This is why I use YouTube revanced. The features for it are great.

2
aeharding vger.social aeharding@vger.social
Joined: 2024-04-15
#87 · Quote Reply

Even voyager gives a link to vger.to when you hit share instead of a direct link to the thing you want to share. No idea what they are doing with it (other than trying to redirect it to the app). Maybe it's set up to just use the localhost and that's all it does, but I usually strip that part out because I have no idea either way.

vger.to solely exists so i can text dumb memes to my non tech inclined friends, and they open in voyager on their device instead of the web.

It’s a dumb service and has zero analytics other than cpu disk bandwidth use lol

4
WhyJiffie sh.itjust.works WhyJiffie@sh.itjust.works
Joined: 2023-07-11
#88 · Quote Reply

til people don't reflexively strip out everything after the ? unless you know exactly what it's doing

most people don't even know what an URL is, and how it's structured. if their browser does not remove the tracking parameters, they won't get removed.

1
WhyJiffie sh.itjust.works WhyJiffie@sh.itjust.works
Joined: 2023-07-11
#89 · Quote Reply

The frequency with which I've seen the si attribute included in youtube links has made me painfully aware of just how many people are not using the internet the same way I do; they're experiencing the internet through a handful of mobile apps, not through a web browser on the desktop.

even some IT pros are leaving it in, knowing well what it does. some people just couldn't care less.

8
sunbytes lemmy.world sunbytes@lemmy.world
Joined: 2023-06-16
#90 · Quote Reply

Done. Thank you.

5
root aussie.zone root@aussie.zone
Joined: 2023-06-10
#91 · Quote Reply

I use this on Android to sanitise links I sent out as well as clean incoming links before viewing them.

https://play.google.com/store/apps/details?id=com.svenjacobs.app.leon

2
oopsgodisdeadmybad lemmy.zip oopsgodisdeadmybad@lemmy.zip
Joined: 2025-10-13
#92 · Quote Reply

I know all this stuff and even I don't look at the technical stuff in the URL. I just make sure it doesn't have dQw4w9WgXcQ in there.

Iykyk

1
YeahToast aussie.zone YeahToast@aussie.zone
Joined: 2025-10-10
#93 · Quote Reply

I know all this stuff and even I don't look at the technical stuff in the URL. I just make sure it doesn't have dQw4w9WgXcQ in there.

I refuse to search for that user, but dammit am I curious.

2
daniskarma lemmy.dbzer0.com daniskarma@lemmy.dbzer0.com
Joined: 2024-04-30
#94 · Quote Reply

You should also known that TikTok does this by default and the generated code is impossible to remove afaik, it's part of the video identifier.

So when sharing a tiktok video always download it and share the file.

6
vogi piefed.social vogi@piefed.social
Joined: 2025-09-07
#95 · Quote Reply

[deleted]

Me neither. Even tried to host it locally at home it the hopes that a private IP would go under googles radar, but after a month or so they blocked me as well. Same goes for LibreTube NewPipe and what not. All just fail on me after a while. The only way is to make it usable with uBlock + Unhook and Morphee Patches on Android. Its honestly not a bad experience except for the added setTimeout when Youtube notices. :)

2
Canaconda lemmy.ca Canconda@lemmy.ca
Joined: 2025-07-10
#96 · (edited) Quote Reply

even some IT pros are leaving it in, knowing well what it does. some people just couldn't care less.

I'm not an IT pro but I am ashamed I didn't know this. I've spent a lot of time cutting up youtube links for shiz.

2
irelephant [he/him] lemmy.dbzer0.com irelephant@lemmy.dbzer0.com
Joined: 2025-06-04
#97 · Quote Reply

vger.to solely exists so i can text dumb memes to my non tech inclined friends, and they open in voyager on their device instead of the web. It’s a dumb service and has zero analytics other than cpu disk bandwidth use lol
[deleted]
3
GiveOver feddit.uk GiveOver@feddit.uk
Joined: 2023-07-03
#98 · Quote Reply

I refuse to search for that user, but dammit am I curious.

this video explains it all

2
SLVRDRGN lemmy.world SLVRDRGN@lemmy.world
Joined: 2024-04-14
#99 · Quote Reply

I refuse to search for that user, but dammit am I curious.

I searched for you and it's actually worth it.

1
partofthevoice lemmy.zip partofthevoice@lemmy.zip
Joined: 2025-10-26
#100 · Quote Reply

It should be common practice if you commonly share links. Try removing the query string (everything after and including the question mark). See if you get to the same page. If you do, don’t use the query string.

Query string parameters are rather often used for tracking. Look for gclid parameters after you click a google ad, for example.

16
NewNewAugustEast lemmy.zip NewNewAugustEast@lemmy.zip
Joined: 2025-06-19
#101 · Quote Reply

If you never sign into YouTube and sharing links from a third party application, what is it that they append? Curious what makes up that shared id.

2
Post Reply Page 2 of 3   Goto page « First 1, 2, 3 Last »
Back to top