Google docs infects html exports with google tracking redirects.

3 years ago by tavu to c/privacy

@Joe_0237@fosstodon.org wrote:

Today I found out that google docs infects html exports with spyware, no scripts, but links in your document are replaced with invisible google tracking redirects. I was using their software because a friend wanted me to work with him on a google doc, he is a pretty big fan of their software, but we were both somehow absolutely shocked that they would go that far.

NocturnalMorning 119 points 3 years ago

Google also replaces your Google searches with different searches behind the scenes to things they can make money off kf. Found that out the other day, and switched to duckduckgo instead. Google has become a Spyware nightmare.

path: 0 4165297, hotness: undefined, score: 119, children: 20
Heresy_generator 106 points 3 years ago

If anyone isn't familiar with this here's the Wired article

Here’s how it works. Say you search for “children’s clothing.” Google converts it, without your knowledge, to a search for “NIKOLAI-brand kidswear,” making a behind-the-scenes substitution of your actual query with a different query that just happens to generate more money for the company, and will generate results you weren’t searching for at all. It’s not possible for you to opt out of the substitution. If you don’t get the results you want, and you try to refine your query, you are wasting your time. This is a twisted shopping mall you can’t escape.

Why would Google want to do this? First, the generated results to the latter query are more likely to be shopping-oriented, triggering your subsequent behavior much like the candy display at a grocery store’s checkout. Second, that latter query will automatically generate the keyword ads placed on the search engine results page by stores like TJ Maxx, which pay Google every time you click on them. In short, it's a guaranteed way to line Google’s pockets.

It’s also a guaranteed way to harm everyone except Google. This system reduces search engine quality for users and drives up advertiser expenses. Google can get away with it because these manipulations are imperceptible to the user and advertiser, and the company has effectively captured more than 90 percent market share.

It’s unclear how often, or for how long, Google has been doing this, but the machination is clever and ambitious. I have spent decades looking for examples of Google putting its enormous thumb on the scale to censor or amplify certain results, and it hadn’t even occurred to me that Google just flat out deletes queries and replaces them with ones that monetize better.

path: 0 4165297 4166017, hotness: undefined, score: 106, children: 18
NocturnalMorning 43 points 3 years ago

I figured this out when I searched for my gaming web page on itch.io, and it wouldn't come up. But then I went to duckduckgo and did the search, and every game I've made was in the search result. Pretty scummy if you ask me. Needless to say I changed all my browsers to duckduckgo instead of google.

path: 0 4165297 4166017 4166141, hotness: undefined, score: 43, children: 6
CrypticCoffee 20 points 3 years ago

By browsers do you mean search engines in the browsers? I use DDG for search. Firefox is king, browsers wise.

path: 0 4165297 4166017 4166141 4167749, hotness: undefined, score: 20, children: 5
NocturnalMorning 10 points 3 years ago

Yes, I meant search engine. I also use Firefox as well :)

path: 0 4165297 4166017 4166141 4167749 4171361, hotness: undefined, score: 10, children: 0
CherenkovBlue 1 point 3 years ago

I thought DDG was some kind of front end for Google search. How wrong am I, and if I'm right, does this mean it's the Google search in, e.g., Chrome browser that's doing this? Otherwise how would DDG be avoiding it?

path: 0 4165297 4166017 4166141 4167749 4171184, hotness: undefined, score: 1, children: 3
somePotato 17 points 3 years ago

Everytime I try to google anything that might be remotely related to a product every result will be a store.

I'd never have assumed that they just replaced my query but in hindsight it's kinda obvious

path: 0 4165297 4166017 4166575, hotness: undefined, score: 17, children: 1
CherenkovBlue 10 points 3 years ago

Yeah I noticed they got very shopping oriented in the last year or so, but I didn't anticipate this. Yikes.

path: 0 4165297 4166017 4166575 4171206, hotness: undefined, score: 10, children: 0
Anticorp 16 points 3 years ago

Google can get away with it because these manipulations are imperceptible to the user

Dude, it's blatantly obvious to the user. Idk why they think they're being clever, but when I search for "Pioneer SC71 user manual" (a home theater amp), and all it shows me are cheap car stereos listings from Walmart and Amazon (with affiliate tracking of course), I know they're not showing me what I'm looking for. It's a worthless service for anything except products and heavily filtered news (they only show what aligns with their agenda). I went from totally loving Google, to not when using them anymore. They're a disease.

path: 0 4165297 4166017 4176182, hotness: undefined, score: 16, children: 0
WarmSoda 14 points 3 years ago

That's clever as fuck. And ridiculous. And crazy evil.

path: 0 4165297 4166017 4170120, hotness: undefined, score: 14, children: 3
Anticorp 2 points 3 years ago

It's not that clever.

path: 0 4165297 4166017 4170120 4176187, hotness: undefined, score: 2, children: 2
WarmSoda 3 points 3 years ago

Is that why no one figured out out until now?

path: 0 4165297 4166017 4170120 4176187 4178050, hotness: undefined, score: 3, children: 1
Atemu 6 points 3 years ago

Wow, that's peak enshittification.

path: 0 4165297 4166017 4184477, hotness: undefined, score: 6, children: 0
wild 3 points 3 years ago

How did they uncover and confirm this?

path: 0 4165297 4166017 4207650, hotness: undefined, score: 3, children: 1
online 4 points 3 years ago

The information provided in the public hearings.

path: 0 4165297 4166017 4207650 4210459, hotness: undefined, score: 4, children: 0
fuzzzerd 3 points 3 years ago

Article removed because it doesn't meet their editorial standards.

path: 0 4165297 4166017 4218757, hotness: undefined, score: 3, children: 0
Anticorp 15 points 3 years ago

That's really obvious based on how fucking terrible their results are now. Google was the most useful tool in the world for a long time. Now they're just a really rich spyware farm.

path: 0 4165297 4176109, hotness: undefined, score: 15, children: 0
guckfoogle 89 points 3 years ago

Literally went from being my favorite company to just an unethical bag of poo for me. Hope whoever's forcing these engineers to create privacy invading spyware eats a bag of dicks.

path: 0 4165506, hotness: undefined, score: 89, children: 3
nik282000 16 points 3 years ago

Having 1gb of mail storage in 2004 was epic, having a 25gb profile in 2023 that I can never see is less so.

path: 0 4165506 4176171, hotness: undefined, score: 16, children: 0
Anticorp 3 points 3 years ago

Same, dude... same.

path: 0 4165506 4176097, hotness: undefined, score: 3, children: 0
MonkderZweite 1 point 3 years ago
path: 0 4165506 4180832, hotness: undefined, score: 1, children: 0
ReversedCookie 39 points 3 years ago
path: 0 4170777, hotness: undefined, score: 39, children: 1
Anticorp 25 points 3 years ago

It's not that shocking. Spyware companies have been doing this stuff since the 90's, and Google is basically just a really rich spyware company now.

path: 0 4170777 4176024, hotness: undefined, score: 25, children: 0
NabeGewell 37 points 3 years ago

Id say this is a new low, but they might have gone even lower already

path: 0 4165549, hotness: undefined, score: 37, children: 2
LilDestructiveSheep 19 points 3 years ago

Definitely gone lower.

path: 0 4165549 4165885, hotness: undefined, score: 19, children: 0
ubermeisters 2 points 3 years ago
path: 0 4165549 4176559, hotness: undefined, score: 2, children: 0
_cnt0 33 points 3 years ago

They've been doing the same with all hyperlinks in the gmail web frontend. Not when you fetch the mails via imap/pop, though.

path: 0 4168075, hotness: undefined, score: 33, children: 0
p_consti 19 points 3 years ago

It's the same thing in emails, if you use the web application. All links are redirect links over their servers.

path: 0 4165647, hotness: undefined, score: 19, children: 0
Sotuanduso 17 points 3 years ago

I was skeptical about this, but yeah, I tested it, and can confirm.

path: 0 4172041, hotness: undefined, score: 17, children: 0
mspencer712 12 points 3 years ago

Are there any beneficial side effects? If they discover a URL is malicious after it’s been exported, would this allow them to intercept the click and stop someone from reaching the malicious site?

path: 0 4166170, hotness: undefined, score: 12, children: 5
d0ntpan1c 29 points 3 years ago

That's how Microsoft markets their "safe links" in Outlook, which is more or less the same behavior of wrapping all links with a redirect. Whether they actually do anything with that to save you from phishing attempts or whatever... who knows. Even if there is a safety feature, it's still an easy way to mine url query params for data or learn about the user for other purposes (which they may or may not be doing)

IMO if you can't turn it off, there's a secondary motive to the feature. Especially when the feature is marketed from a place of fear rather than aid.

path: 0 4166170 4169583, hotness: undefined, score: 29, children: 3
foksmash 4 points 3 years ago

The MS security feature does work quite well (at least for Enterprise).

path: 0 4166170 4169583 4171204, hotness: undefined, score: 4, children: 2
01189998819991197253 1 point 3 years ago

I'm not sure I would categorize it as working "quite well". At least not in my experience. It's better than nothing.

path: 0 4166170 4169583 4171204 4207382, hotness: undefined, score: 1, children: 1
foksmash 2 points 3 years ago

Ya, I would tend to agree and left out the context. It's not our only URL filtering tool, we have a full proxy and URL rewrite in email for that but it does help fill in gaps when people click links from devices we don't manage.

path: 0 4166170 4169583 4171204 4207382 4218368, hotness: undefined, score: 2, children: 0
Linus_Torvalds 0 points 3 years ago

While I would be sceptical that this is the main reason, this might be a valid argument. Google can track users and protect the stupid users at the same time, who otherwise would endanger the public image of Google Docs('i GoT sCaMmEd oN gOoGlE dOcS')

path: 0 4166170 4168137, hotness: undefined, score: 0, children: 0
library_napper 11 points 3 years ago

Google would argue that this is a security feature.

Many business intentionally do this in google hosted email. It allows google to display warmings about links to malicious websites

path: 0 4183556, hotness: undefined, score: 11, children: 0
Shaul 8 points 3 years ago

How are people surprised? How is this news?

The second you mentioned Google you're talking about an all-seeing totalitarian state. Nothing you said about imbedding tracking links in docs is surprised. As a corporation they are always developing new ways to pimp you out and make you turn tricks for Google without you knowing while they keep all of the pay from your actiities.

Google tries to turn every human on the planent into their personal money making whore.

path: 0 4171765, hotness: undefined, score: 8, children: 5
insomniac 16 points 3 years ago

Of course it’s not at all surprising but it’s still particularly egregious and should be called out.

path: 0 4171765 4172777, hotness: undefined, score: 16, children: 0
ubermeisters 16 points 3 years ago
path: 0 4171765 4176514, hotness: undefined, score: 16, children: 3
01189998819991197253 4 points 3 years ago

nincompoop

Now there's a term I haven't heard in a hot minute haha

path: 0 4171765 4176514 4207330, hotness: undefined, score: 4, children: 2
ubermeisters 1 point 3 years ago
path: 0 4171765 4176514 4207330 4207590, hotness: undefined, score: 1, children: 1
01189998819991197253 2 points 3 years ago

Definitely with a cigar in your mouth. Maybe with a signature look of superiority, as well hahahaha

path: 0 4171765 4176514 4207330 4207590 4220439, hotness: undefined, score: 2, children: 0
FeelzGoodMan420 7 points 3 years ago

Can someone eli5 this please? What's going on here?

path: 0 4171526, hotness: undefined, score: 7, children: 7
Sotuanduso 34 points 3 years ago

I have a Google Doc that's a statblock for an RPG. It has a link to the mage armor spell, which goes directly to https://www.d20pfsrd.com/....

I just downloaded that statblock as an html. Then I opened that html file. The statblock is there and it all looks pretty much the same.

But then I hover over the mage armor link and it instead goes to https://www.google.com/....

This page immediately redirects to the proper destination in a fraction of a second. Blink and you'll miss it. However, it does allow Google to track that I clicked the link, and probably associate it back to me and/or the original document.

path: 0 4171526 4171916, hotness: undefined, score: 34, children: 6
FeelzGoodMan420 9 points 3 years ago

Thanks. Got it. Could a pihole potentially block this?

Edit: nvm then you just simply couldn't open the links.

path: 0 4171526 4171916 4171951, hotness: undefined, score: 9, children: 3
shrugal 9 points 3 years ago

Afaik there are browser extensions that find and replace these kinds of tracking links with the original ones.

path: 0 4171526 4171916 4171951 4172218, hotness: undefined, score: 9, children: 1
FeelzGoodMan420 9 points 3 years ago

Oh, right. Like clearURL and certain ublock origin lists?

path: 0 4171526 4171916 4171951 4172218 4172510, hotness: undefined, score: 9, children: 0
Sotuanduso 6 points 3 years ago

It's probably easy enough to write a script that will go through the generated HTML and just scrub out the Google.

path: 0 4171526 4171916 4171951 4172000, hotness: undefined, score: 6, children: 0
someguy3 4 points 3 years ago

So if there's only a few links, you could manually replace them?

path: 0 4171526 4171916 4172479, hotness: undefined, score: 4, children: 1
Sotuanduso 6 points 3 years ago

Yes. You could probably also write a simple script that scrubs the Googles out.

path: 0 4171526 4171916 4172479 4172509, hotness: undefined, score: 6, children: 0
IWantToFuckSpez 2 points 3 years ago

Write your own exporter in Apps Script if you have to keep using Google workspace

path: 0 4167365, hotness: undefined, score: 2, children: 4
itwasawednesday 4 points 3 years ago

What's layman words for this please?

path: 0 4167365 4170111, hotness: undefined, score: 4, children: 2
Sotuanduso 4 points 3 years ago

Google has a thing called Apps Script that lets you write code to run on documents. You could write one that creates an HTML file from your doc without including Google's redirects.

path: 0 4167365 4170111 4172032, hotness: undefined, score: 4, children: 1
ubermeisters -2 points 3 years ago
path: 0 4167365 4170111 4172032 4176586, hotness: undefined, score: -2, children: 0
Joe_0237 2 points 3 years ago

@IWantToFuckSpez @tavu another option would be to parse the file and urls and remove the trackers from the formal export. Or to do it by hand if you don't to it much.

path: 0 4167365 4183574, hotness: undefined, score: 2, children: 0
Joe_0237 2 points 3 years ago path: 0 4181897, hotness: undefined, score: 2, children: 1
tavu 2 points 3 years ago

Hi! I'm over here on lemmy, and created this post as a link to your post. I don't think there's a mutually compatible way to repost/boost a mastodon post into a lemmy community, but this seemed close enough.

path: 0 4181897 4181898, hotness: undefined, score: 2, children: 0
privacy
privacy

@lemmy.ml

login for more options
51397
5290
5100

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

  • Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
  • Don't promote proprietary software
  • Try to keep things on topic
  • If you have a question, please try searching for previous discussions, maybe it has already been answered
  • Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
  • Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

go to feed...