Post: #1

Quick heads up on possible security issue I thought every RVF member should be aware of. Roosh: If I am mistaken then accept my apologies and simply delete this thread.

Many of you have been taking advantage of the new {t}sometweetlink{/t} tag (shown here with curly braces so that it displays but it's of course done with square brackets. Now often you may feel tempted to click on an embedded tweet for more details or to access the linked article. IF YOU DO then please make sure that you are using an anonymous browser window on top of your VPN connection. Because a typical tweet link looks like this:

http:// twitter.com/polNewsForever/status/889997080391036931?ref_src=twsrc%5Etfw&ref_url=https%3A%2F%2Fwww.rooshvforum.com%2Fthread-61192-post-1618960.html%23pid1618960

Now if you are using a regular browser window and you are logged into your twitter account (via your cookie) then twitter is effectively able to link your account to the RVF forum. Obviously the same applies if you're clicking on a tweet over on ROK as well.

For some of you this may not be a big deal, but my lifelong motto has always been 'only the paranoid survive'. Given the political leaning of twitter and other social media sites exposing your repeated visits to this forum or any other of Roosh's sites is information that may be collected and perhaps used against you in the future.

My recommendation is to simply open an anonymous window and click on the twitter feed from there. Also, perhaps Roosh can have someone technical take a look at the plugin that parses the twitter link and hack it so that it truncates the referring URL as such:

twitter.com/polNewsForever/status/889997080391036931?ref_src=twsrc%5Etfw

Works just as well and (I hope) Twitter is none the wiser where it comes from. Although it may be traced via the referring URL in the HTTP header.

Post: #2

Odd, I just tested it out on some links from the CNN thread while logged in with this account and none of them seemed to add those parameters.

That being said, you should be aware anyway that in standard browser configuration, ANY link you follow to ANY site is going to include the referring page in the header of the HTTP request sent to the new server. You can modify this behavior: https://www.ghacks.net/2015/01/22/improv...formation/. Disabling it might break some features, but it's not considered good practice to rely on referer[sic] for anything critical https://stackoverflow.com/questions/1236...er-missing

Post: #3

I noticed that when I was sharing tweet links from the forum to friends. Glad I noticed it because it's a pretty easy way to "dox" yourself as a member or viewer of this forum to those you may not want to know