"Share a link" for a post should not leak username

Currently, using the “Share a link” or copying the URL associated with a post’s timestamp results in a URL that contains the username of whoever does the copying, if that person happened to be logged in at the time. This poses some privacy concern: If the link gets shared around, possibly forwarded multiple times, it exposes who was the original person to create it – like a watermark. While it is possible to just remove the u=..., this is easily forgotten when just copy-pasting URLs around. After all, users do not typically expect a URL to leak information like this. I also tried hard to come up with a good reason for why the username is in the link, and failed – I suppose there is a reason, but I wonder if it is worth the cost?

So, please remove the u=... at the end of posts’ URLs.

5개의 좋아요

It discussed already and having a solution below

10개의 좋아요

Including the username is a feature that allows Discourse to track who has shared a link. One can easily copy the URL from the web browser. If you want to disable this feature see the discussion @vinothkannans linked to.

2개의 좋아요

I love the feature because it enables us to track the top referrers, who we do appreciate with gifts and freebies. It’s one of the ways we grow our community.

6개의 좋아요

I am not an admin of the forums I frequent, so I it doesn’t seem like I can do the customization you are suggesting.

You are literally tracking people across the internet for the benefit of some cute badges…? :frowning:

1개의 좋아요

Then rather than clicking the :link: icon, type control-L then control-c. If you really want to use the mouse, then you can click the location bar in your browser, and probably right-click and select “copy”.

Being able to give users credit for bringing new users to a community is literally a valuable benefit in the eyes of many community managers.

1개의 좋아요

Usernames are public and specific to the site, so I don’t think it’s a privacy issue.

1개의 좋아요

I usually want to link to a particular post. When I see three posts on the screen, I do not know which one the link goes to.

I see. I personally don’t agree, but at least this explains why the name is added to the link. I still think it’s a very problematic default, but I realize that this kind of community building has higher priority here than privacy concerns.

I don’t follow. It’s not about leaking the fact that a user with that name exists on that forum – that’s indeed public information. It’s about the fact that this user is the one who originally shared this link. That’s definitely not public information.

2개의 좋아요

Sorry, but I’m not following.

For me, the ?u=mittineague can easily be removed with an edit - if I wanted to not have it for a post I was referring to, and alternatively it could be removed by script - if I wanted to not have it for any posts referred to by anyone.

Personally, if I care enough to refer to a post, I really don’t care if others know that it was me that referred to it. That is, I don’t understand how this could be a source of a “privacy” problem. Please post an example of how this can be a problem.

1개의 좋아요

I think that the logic is that If they shared the link publicly, e.g, on twitter, then it’d be public that they’d shared it anyway. But your logic is different.

Well this would first of all leak a connection between maybe otherwise uncorrelated usernames. I may not want to reveal who I am on that forum as I pass on links to a different group of people. I wouldn’t expect that to be revealed.
Also, the name sticks around as the link gets copy-pasted into more places, still pointing to who originally started the reference.

Technically savvy people will easily recognize that their username is in the URL and just remove it, but I wouldn’t expect non-technical people to know that they can modify a URL like that and still have it point to the same thing.

1개의 좋아요

I tried this in another forum where I am admin, and it does not work. When I click on a post’s time and copy what I get, it still adds ?u=... to the URL.

That script will remove the username from “share a link to this post” button only. Not in the time link. If you like to remove that then you have to add some extra modifications.

3개의 좋아요

사용자 설정에서 사용자 이름 추적을 비활성화할 수 있는 기능이 있을까요? 타임스탬프 링크에 제 사용자 이름이 표시되는 걸 원치 않습니다. URL을 수동으로 수정할 수는 있지만, 번거롭고 실수하기 쉽습니다.

4개의 좋아요

이것을 환영할 만한 포럼도 하나 떠올랐어요. :+1:

사용 사례로, 일반적으로 사람들이 내가 그 포럼을 읽는다는 사실을 아는 것은 괜찮지만, 내 실제 게시글로 나를 연결하지 않기를 원하는 포럼(예: 성 관련 조언 포럼이나 정신 건강 포럼)이 있겠죠.

이 함수를 오버라이드하기 위해 작은 테마 컴포넌트를 만들 수 있다고 생각합니다. 참고로 사이트 설정에서 배지를 비활성화하면 URL에서 사용자 이름이 제거됩니다.

3개의 좋아요

각 사용자에게 닉네임 대신 서로 다른 추천 코드가 부여되면 좋겠습니다. 예를 들어 제 닉네임은 bigluke97이지만, 제 추천 링크는 hrt72skd0입니다. 이렇게 하면 제 추천 링크가 ?u=hrt72skd0처럼 되어, 시스템은 그것이 저(bigluke97)의 링크임을 알 수 있게 되지만, 특정 추천 코드가 누구와 연결되어 있는지 아는 것은 스태프 멤버들만 가능해집니다. 다른 사용자는 알 수 없게 되는 것이죠. 이것이 완전한 익명성을 보장하지는 않지만, 적어도 공개적으로 노출되는 닉네임을 직접적으로 표시하지 않는다는 점에서 훨씬 더 프라이버시에 유리합니다.

솔직히 링크에 닉네임을 코드로 사용하는 것에는 문제가 없다고 생각합니다만, 제 생각에는 여전히 프라이버시 중심의 매우 좋은 아이디어라고 생각합니다.

6개의 좋아요

여기 사이트 설정을 지원할 수 있습니다. @zogstrip, 다음 릴리스에 이 작업을 포함할 수 있을까요?

5개의 좋아요

다음 릴리스에 포함할 예정입니다.

상세 내용을 알려 주시겠습니까?

  • 체인 아이콘을 클릭할 때 discourse가 렌더링하는 링크에 ?u=sam이 추가되는 것을 완전히 비활성화하는 사이트 설정

또는

  • 사용자별 설정?
4개의 좋아요

@yhh9xdq7d가 제안한 익명화된 추천 링크는 기능(추천 추적)을 제거하지 않으면서도 대부분의 프라이버시 이점을 제공할 수 있지 않나요? 추천 링크를 완전히 비활성화하는 사이트 설정이 더 바람직할 이유가 있을까요?

3개의 좋아요