5 ms·

Funny that the site tries to load some garbage from googletagmanager.com

by voytec 3y ago

chupapimunyenyo 3y ago
This is how much they care
cqqxo4zV46cp 3y ago
I’ve seen countless occurrences of Google Tag Manager being routinely used for all kinds of things that aren’t “advertising cookies”. There really is no need for the snark.
- zelphirkalt 3y ago
  It is in the same league as advertising cookies. If I visit a website, I want to read or interact with that website, not with Google. Trying to shove Google into my face will meet the same reaction as trying to shove ads in my face. Getting blocked.
  - rrr_oh_man 3y ago
    > Trying to shove Google into my face will meet the same reaction as trying to shove ads in my face. Getting blocked. You will have a hard time browsing the web, including this site ;)
    - the_third_wave 3y ago
      Not at all, just use a content blocker in whitelist mode allowing 1st party content and you're done.
    - cwales95 3y ago
      Not really. I block all occurences of google tag manager and a lot of other ad related services and I have 0 issues.
    - bmacho 3y ago
      > You will have a hard time browsing the web, including this site ;) No, HN works even js disabled. I did this experiment a while ago, blocking google in my hosts file. Usually fonts break (arrows, icons), and javascript breaks (reddit and stackoverflow need google ajax jquery to uncollapse collapsed messages). But in general most of the web is usable. In theory it should be possible to host fonts and jquery locally, but I wasn't able to manage that.
      - zelphirkalt 3y ago
        I am nor 100% sure, but I think injecting resources locally is what Decentraleyes does.
      - eddd-ddde 3y ago
        Maybe you can "mock" google domains and serve them locally?
    - Diti 3y ago
      Content blocking is not an all-or-nothing process. Popular blocklists have different flavors depending on whether you value privacy (blocking almost everything Google, etc.) or usability (blocking ads, telemetry, third-parties) but allowing everything else.
      - deleted 3y ago
        [deleted]
  - dewey 3y ago
    > Trying to shove Google into my face Unless you always browse with the network inspector open I don't really see how that would be the case.
    - zelphirkalt 3y ago
      It is really not very complicated. It is actually very simple. When I visit a new website, I check what it requests using uBlock Origin. Then just block those unwanted stuff. If the website does not work without something like Google fonts or tag manager or whatever other bloat, it means, that it is shoddy-made, by an either uninformed or ignorant entity. It probably is illegal according to EU law as well, since I never gave consent to being tracked by third parties. I do not use that website. Browser tab closed. In the cases, in which an external entity forces me to use crap websites, I isolate them in browser profiles and/or container tabs. In cases, in which the content is only available on that website, I can try reader mode. Or try to find some other frontend, like Invidious for YouTube. So in most cases I can do something to reduce the toxicity of the cocktail, that modern web development practices have cooked up for me.
      - masto 3y ago
        And other than being stressed and annoyed and having to fuss with a bunch of extra stuff to use the Internet, this makes your life better how?
        zelphirkalt 3y ago
        Websites load faster. I filter out BS websites with low information density. I avoid ads and being tracked by random companies that I don't trust. I feel more comfortable visiting websites knowing, that my personal data does not automatically flow to random companies. I don't have to sit through YouTube ads either. I get what I came for, then I leave. To me this is a great benefit. But lets not forget, that we are all part of a human society. Almost no ones, if anyone's behavior has no effect on others. By using the Internet like I do, I am also acting in a responsible way regarding my effect on society. We need more people resisting big tech surveillance and daily violation of privacy. I hope some day more of us can look beyond immediate personal benefit.
  - troyvit 3y ago
    I block it too. However, it is only what it says on the tin: a tag manager. IOW it's a convenient place to hold all those useful snippets[1] of javaScript in one place. Most companies want that place to be google because it's seen as bulletproof. [1] And yeah most of those useful snippets are for tracking, but actually several privacy solutions like cookie management platforms can be held inside a tag manager as well. To me it's still worth it because if I block those CMPs along with GTM it means no banner and no agreeing to any tracking.
- standing_user 3y ago
  Indeed, you can use that for a plethora of things besides the advertising. Also many websites are using Google Analytics as base tool for reporting and monitoring activities
the_mitsuhiko 3y ago
We are also in the process of eliminating that.
quickthrower2 3y ago
GTM. End running ops/dev teams since … well whenever it first came out.
- Rapzid 3y ago
  RIP secure SDLC.
Rapzid 3y ago
Ah, GTM. I think people might be shocked that access to this RCE backdoor is often given to non-technical roles and even outsourced marketing resources..With no controls in place at all. Security nightmare.
- sangeli7 3y ago
  That's why at Sentry non-technical people don't have the ability to publish new GTM versions. It's tightly controlled because we don't want marketing to shove things in there without engineering and security reviewing.
  - Rapzid 3y ago
    The joys of reviewing a GTM change submitted by some Chad at "Marketers R Us" where they copied a minimized, practically obfuscated, JavaScript blob of unknown origin into the browser. LGTM! FML... Also GTM can get fucked.

Funny that the site tries to load some garbage from googletagmanager.com

by voytec 3y ago

Funny that the site tries to load some garbage from googletagmanager.com

chupapimunyenyo 3y ago

This is how much they care

cqqxo4zV46cp 3y ago

I’ve seen countless occurrences of Google Tag Manager being routinely used for all kinds of things that aren’t “advertising cookies”. There really is no need for the snark.

zelphirkalt 3y ago
It is in the same league as advertising cookies. If I visit a website, I want to read or interact with that website, not with Google. Trying to shove Google into my face will meet the same reaction as trying to shove ads in my face. Getting blocked.
- rrr_oh_man 3y ago
  > Trying to shove Google into my face will meet the same reaction as trying to shove ads in my face. Getting blocked. You will have a hard time browsing the web, including this site ;)
  - the_third_wave 3y ago
    Not at all, just use a content blocker in whitelist mode allowing 1st party content and you're done.
  - cwales95 3y ago
    Not really. I block all occurences of google tag manager and a lot of other ad related services and I have 0 issues.
  - bmacho 3y ago
    > You will have a hard time browsing the web, including this site ;) No, HN works even js disabled. I did this experiment a while ago, blocking google in my hosts file. Usually fonts break (arrows, icons), and javascript breaks (reddit and stackoverflow need google ajax jquery to uncollapse collapsed messages). But in general most of the web is usable. In theory it should be possible to host fonts and jquery locally, but I wasn't able to manage that.
    - zelphirkalt 3y ago
      I am nor 100% sure, but I think injecting resources locally is what Decentraleyes does.
    - eddd-ddde 3y ago
      Maybe you can "mock" google domains and serve them locally?
  - Diti 3y ago
    Content blocking is not an all-or-nothing process. Popular blocklists have different flavors depending on whether you value privacy (blocking almost everything Google, etc.) or usability (blocking ads, telemetry, third-parties) but allowing everything else.
    - deleted 3y ago
      [deleted]
- dewey 3y ago
  > Trying to shove Google into my face Unless you always browse with the network inspector open I don't really see how that would be the case.
  - zelphirkalt 3y ago
    It is really not very complicated. It is actually very simple. When I visit a new website, I check what it requests using uBlock Origin. Then just block those unwanted stuff. If the website does not work without something like Google fonts or tag manager or whatever other bloat, it means, that it is shoddy-made, by an either uninformed or ignorant entity. It probably is illegal according to EU law as well, since I never gave consent to being tracked by third parties. I do not use that website. Browser tab closed. In the cases, in which an external entity forces me to use crap websites, I isolate them in browser profiles and/or container tabs. In cases, in which the content is only available on that website, I can try reader mode. Or try to find some other frontend, like Invidious for YouTube. So in most cases I can do something to reduce the toxicity of the cocktail, that modern web development practices have cooked up for me.
    - masto 3y ago
      And other than being stressed and annoyed and having to fuss with a bunch of extra stuff to use the Internet, this makes your life better how?
      - zelphirkalt 3y ago
        Websites load faster. I filter out BS websites with low information density. I avoid ads and being tracked by random companies that I don't trust. I feel more comfortable visiting websites knowing, that my personal data does not automatically flow to random companies. I don't have to sit through YouTube ads either. I get what I came for, then I leave. To me this is a great benefit. But lets not forget, that we are all part of a human society. Almost no ones, if anyone's behavior has no effect on others. By using the Internet like I do, I am also acting in a responsible way regarding my effect on society. We need more people resisting big tech surveillance and daily violation of privacy. I hope some day more of us can look beyond immediate personal benefit.
- troyvit 3y ago
  I block it too. However, it is only what it says on the tin: a tag manager. IOW it's a convenient place to hold all those useful snippets[1] of javaScript in one place. Most companies want that place to be google because it's seen as bulletproof. [1] And yeah most of those useful snippets are for tracking, but actually several privacy solutions like cookie management platforms can be held inside a tag manager as well. To me it's still worth it because if I block those CMPs along with GTM it means no banner and no agreeing to any tracking.
standing_user 3y ago
Indeed, you can use that for a plethora of things besides the advertising. Also many websites are using Google Analytics as base tool for reporting and monitoring activities

the_mitsuhiko 3y ago

We are also in the process of eliminating that.

quickthrower2 3y ago

GTM. End running ops/dev teams since … well whenever it first came out.

Rapzid 3y ago
RIP secure SDLC.

Rapzid 3y ago

Ah, GTM. I think people might be shocked that access to this RCE backdoor is often given to non-technical roles and even outsourced marketing resources..With no controls in place at all. Security nightmare.

sangeli7 3y ago
That's why at Sentry non-technical people don't have the ability to publish new GTM versions. It's tightly controlled because we don't want marketing to shove things in there without engineering and security reviewing.
- Rapzid 3y ago
  The joys of reviewing a GTM change submitted by some Chad at "Marketers R Us" where they copied a minimized, practically obfuscated, JavaScript blob of unknown origin into the browser. LGTM! FML... Also GTM can get fucked.