Hacker News Reader

They literally sent file names and file sizes over to Facebook. That might very well include very personal or confidential data. The fact that they don't even mention this and make it sound like some random unimportant tracking happened without them noticing is completely ridiculous.

View on HN

Yeah, like file names of say PDF's, files with unique identifiers that give insight to the users personal life, worse still profile names of PC backups etc. etc.

The part I don't understand is how exactly does a tracking pixel end up collecting filename information?

Because it's a script that examines the DOM and ships the information from the page to facebook for analysys.

How do we know it did this? They didn't say so

Here's the screenshot: https://twitter.com/Benjojo12/status/1373707799054712836

Thanks! Was missing this in the context.

Reply on news.ycombinator.com