search

EFForg / privacybadger

Privacy Badger is a browser extension that automatically learns to block invisible trackers.
https://privacybadger.org
Other
3.19k stars 386 forks source link

Atlassian's Global Analytics Service (GASv3) API in Jira #2358

Open AGhost-7 opened 5 years ago

AGhost-7 commented 5 years ago

Noticed that some new endpoints appear to be sending data over to segment.io when using Jira, which isn't being blocked by privacy badger:

https://*.atlassian.net/gateway/api/gasv3/api/v1/p Screen Shot 2019-05-07 at 12 01 35 PM

https://*.atlassian.net/gateway/api/gasv3/api/v1/t Screen Shot 2019-05-07 at 12 03 05 PM

bcyphers commented 5 years ago

Is the issue here that Privacy Badger should be blocking the requests? If so, can you check whether "segment.io" is present in your snitch map at all? (just step 3 here)

AGhost-7 commented 5 years ago

Yes, the issue is that I think Privacy Badger should be blocking those requests. It doesn't look like segment.io is in the map.

bcyphers commented 5 years ago

Possibly related: #367

ghostwords commented 5 years ago

Looks like these are POST requests. Related to #794, which is probably about looking into GET request query strings.

ghostwords commented 5 years ago

If we were to implement this, we'd probably want to ignore user-initiated form submissions (https://github.com/EFForg/privacybadger/issues/2221#issuecomment-442134054).

ghostwords commented 11 months ago

I think this is part of Atlassian's Global Analytics Service (GASv3).

https://www.atlassian.com/engineering/cloud-overview

GASv3 exposes an API that is used by all of our product analytic client libraries to transmit structured data into our pipeline.

So then this is first party tracking but maybe integrated into third parties on the backend?

Does segment.io show up anywhere in your browser's network tools when these "gasv3" requests are sent?

How would Privacy Badger know that these are tracking requests?