I don’t know if there’s something I’m missing but it’s not clear to me where the tracking link is with those links, or if there’s even a tracking link at all.

  • wheresmysurplusvalue [comrade/them]@hexbear.net
    link
    fedilink
    English
    arrow-up
    11
    ·
    edit-2
    25 days ago

    The link has an automatic redirect which takes you to a different URL with tracking parameters baked in. So you need to follow the redirect in order to remove the tracking parameters.

    Here’s an example (possible tracking parameters redacted). Random video from my feed.

    http://xhslink.com/a/abcdefg1234567
    

    Redirects to

    https://www.xiaohongshu.com/discovery/item/6786cfb3000000000100860e?app_platform=android&ignoreEngage=true&app_version=8.59.0&share_from_user_hidden=true&xsec_source=app_share&type=video&xsec_token=XXXXX%3D&author_share=1&xhsshare=CopyLink&shareRedId=XXXXX&apptime=1737091379&share_id=XXXXX
    

    Now you can remove everything after and including the question mark ?

    https://www.xiaohongshu.com/discovery/item/6786cfb3000000000100860e

    At least I think it works, let me know if you don’t get a video talking about the Jakarta Method.

    • InsidiousTrackers [none/use name]@hexbear.netB
      link
      fedilink
      English
      arrow-up
      5
      ·
      edit-2
      24 days ago

      Still requires the xsec_token in there. The URL when linking to a video is invalid without that token (but still works for profiles etc), which makes me think that it still resolves to something on their backend, but it’d get more expensive to process it that way with so many users.

      Anyway, the bot was demodded by an admin when the new Lemmy update came out so people can share their rednote links willy-nilly for now. There’s a reason this issue cropped up now, because the Lemmy update didn’t take into account cases like this which use rainbow tables to obscure all the tracking info. Things like Instagram (instagram.com/share/a/blahblah), TikTok etc. will all leak information, which is why I think the admin’s reasoning for this bot’s removal was misguided. As far as I know, rednote shouldn’t leak personal information to people following your links, unlike TikTok… I think. It might recommend the sharer’s account though, but that’s just conjecture, I haven’t used it long enough to test.

      • InsidiousTrackers [none/use name]@hexbear.netB
        link
        fedilink
        English
        arrow-up
        3
        ·
        edit-2
        24 days ago

        @CARCOSA@hexbear.net admins should make the call on whether to continue allowing xhslink URLs or not.

        Also note that TikTok links are not being removed by the bot because it cannot, but no one shares TikTok links here because of the site culture that we’ve inculcated, though this relies on people continuing to adhere to it themselves.

    • half_giraffe [comrade/them]@hexbear.net
      link
      fedilink
      English
      arrow-up
      2
      ·
      25 days ago

      Could just be me but this leads me to a page to download rednote, it’s all in mandarin tho so I’m just guessing based on the icons. Some other links in this thread lead to the actual app for me

    • Carcharodonna [she/her]@hexbear.netOP
      link
      fedilink
      English
      arrow-up
      2
      ·
      24 days ago

      The issue with that, unless I’m mistaken, is then it wont open up the video in browser and asks you to open it through the app. I haven’t tried on desktop but it doesn’t appear to open in a browser window with the shortened link.