« first day (3116 days earlier)      last day (19 days later) » 

2:27 AM
@RyanM sure, but unless a tracking pixel's URL is made by the requesting resource to include information about the requesting resource's location, the only way I know of for the third party hosting the tracking pixel to get that info is through the referer header. I can disable the referer header pretty easily. It would be relatively more difficult for me to userscript out info shared cooperatively via URL.
 
 
8 hours later…
10:36 AM
huh. since I disabled the referer header, I can no longer load github.dev. it goes into a loop of death in trying to authenticate a session...
great
 
 
3 hours later…
1:07 PM
 
 
7 hours later…
7:53 PM
@user Technically, the answer is "yes". The payment doesn't necessarily mean it's monetary (e.g., most advertisements will be handing money) but some times there is other initiative. I think Google had (or may still have?) some monitoring you can include on your site which was separate from AdSense but still tracked impressions and such. It was something to do with advising you on better way to improve your site, so it gave you some statistics and recommendations. But this
information would still be used by Google. Similarly, Facebook did track users with the share/like button you could add to your site. In return you got some boost of popularity from your site being shared on Facebook. So, if some site is handing your data to another party, there is usually some gain for the site.
 
8:05 PM
@VLAZ how much info about site usage can the google ads script get on a site where it is included? I've never tried- does same-origin-policy isolate different-origin scripts into different JS execution contexts? I.e. can google ads script access the host site's DOM and global variables?
wait it must be able to, right? or else how does the host site use global variables from libraries included as scripts? (pre-ES modules and exports things)
 
8:19 PM
@user There is no isolation happening. If you include a script from some source, it just excecutes on the same page in the same context as everything else. Which has historically been a huge issue which is why modules were born, so you could isolate stuff. Otherwise things could trample over global variables and such.
Unless you include an iframe - then code in the iframe is executed in the context of the iframe and not in the global one.
 
@VLAZ wow. I really don't have a great understanding of what same-origin-policy actually is and means. including scripts is a big trust exercise then... unless you really go and read the entire script (have fun with minified code / hope for source maps / build from source) and nonce the reference to the script.
 
@user You'd use IIFEs to isolate stuff pre-modules. In fact, a very common pattern was to write something like
(function($) {
    $("use jquery here");
})(jQuery)
Because 1. you are not guaranteed that $ is jQuery. It is just a shortcut - widely used but not guaranteed to be available. So you wrap your script in an IIFE, then pass the jQuery object in it, which then gets essentially "aliased" to $ but only for the code inside your own IIFE. Which then is isolated from the rest;
 
@VLAZ yep. this I know.
@VLAZ the jquery part I didn't know. I have hardly used jquery.
I do know that chrome devtools has shortcuts $ and $$ for document.querySelector and document.querySelectorAll because it always annoys me when I can't use them like I expect because a site uses jquery :P
 
It's also similar with other things. But if you wrote some script that uses jQuery, that's the most common thing you might encounter. And it's because you can never guarantee what sort of environment your script would run in.
@user "Back in the day", like, a decade ago now - there was also Prototype. Not a great library for at least two reasons: 1. very hard to find documentation for, because you'd search "prototype string" and find stuff about the JS prototype. Not about what the library called Prototype has for strings 2. It also used $ globally similar to jQuery.
If your website used both of these (not uncommon) you had to deal with which code needs which library.
 
9:15 PM
@VLAZ wow that sounds like a super fun time (not)
 

« first day (3116 days earlier)      last day (19 days later) »