When you share a YouTube video using the share button it adds “si=some_unique_code” to the URL. If you don’t remove that it shows your personal account to anyone who receives it so that they can chat directly with you. For a lot of people this is their real name.
I’ve seen it all over Lemmy so I figured I’d mention it here! You only need the stuff before the question mark in the URL to let others see the video.
This can also be turned off in your YouTube settings under the privacy section. The setting is “channel visibility for shared links”. It will still add the si code for tracking though.
119 Comments
rimu@piefed.social · 113 pts · 36d
YSK PieFed automatically strips that out.
Edit: posts only, not in comments.
SCmSTR@lemmy.blahaj.zone · 49 pts · 36d
Like if you post a YouTube link, the platform detects it and automatically edits the link?
rimu@piefed.social · 37 pts · 36d
Yeah
grranibal@lemmy.zip · 15 pts · 36d
Pretty cool!
WesternInfidels@feddit.online · 6 pts · 36d
Is that so?
Edit: I posted this from PieFed, and it preserved the "?si=" part of the URL, which I have since edited out by hand.
This one I loaded from a private-browsing tab. The URL includes the tracking ID but it may not be connected to me.
rimu@piefed.social · 6 pts · 36d
It doesn't do it in comments, just when you make a post.
wols@lemmy.zip · 2 pts · 35d
IMO You should add that detail to your top-level comment, as it's going to be seen by more people than this clarification that definitely runs counter to how I interpreted your comment.
WesternInfidels@feddit.online · 1 pts · 35d
That would explain some things. Isn't it a little bit odd to handle those differently? Oh well.
Redjard@reddthat.com · 3 pts · 36d
They might be talking about the default web interface.
WesternInfidels@feddit.online · 3 pts · 36d
That's what I use!
mesamunefire@piefed.social · 5 pts · 36d
Thats great!
acockworkorange@mander.xyz · 1 pts · 36d
Thank you for that.
ace_garp@lemmy.world · 59 pts · 37d
Pipepipe does not include this tracking, by default.
CubitOom@infosec.pub · 31 pts · 36d
Same with freetube (which can be used for both mobile and desktop)
lemmysmash@piefed.social · 13 pts · 36d
Same with LibreTube.
Pipster@lemmy.blahaj.zone · 7 pts · 36d
Revanced strips it when copying or sharing the video url
atro_city@fedia.io · 6 pts · 36d
Grayjay does too.
victorz@lemmy.world · 5 pts · 36d
Hopefully NewPipe does the same,
as PipePipe's successor.MonaySimpson@lemmy.ml · 9 pts · 36d
I'm preeeeety sure PipePipe is the successor. Or atleast a different fork with more updates.
victorz@lemmy.world · 3 pts · 36d
You are correct. Or, rather, not the successor but an independent fork (doesn't necessarily adopt upstream changes).
I don't know what the hell I saw just the other day. I am 100% certain that I read that some GitHub project I was looking at said it was a fork of PipePipe, or in reverse, that "you should use NewPipe as it supersedes this repo".
🤨 I need to dive into my browser history...
Edit: ah! It was PipePipe! I just misinterpreted this line:
I took this to mean:
🤦♂️💁♂️ D'oh.
ace_garp@lemmy.world · 5 pts · 36d
Newpipe and Tubular also share videos without the tracking, by default.
victorz@lemmy.world · 3 pts · 36d
Nice!
victorz@lemmy.world · 38 pts · 36d
Always remove those search parameters before pasting links, even to my friends. F—k these big tech platforms, I'm not giving you any sharing data!
Crescent@fedinsfw.app · 2 pts · 36d
Same here, the awful thing is if they click on it, they cannot see the comments under the video and can only "reply" to you. Not sure what that should do, since the link has already been shared.
eah@programming.dev · 33 pts · 36d
The frequency with which I've seen the
siattribute included in youtube links has made me painfully aware of just how many people are not using the internet the same way I do; they're experiencing the internet through a handful of mobile apps, not through a web browser on the desktop.some_kind_of_guy@lemmy.world · 9 pts · 36d
Even then.. what proportion of people do you think know the parts of a URL? Or know what a URL even is...
You may be in a bubble, friend
Kolanaki@pawb.social · 7 pts · 36d
I know all this stuff and even I don't look at the technical stuff in the URL. I just make sure it doesn't have dQw4w9WgXcQ in there.
YeahToast@aussie.zone · 2 pts · 35d
I refuse to search for that user, but dammit am I curious.
GiveOver@feddit.uk · 2 pts · 35d
this video explains it all
SLVRDRGN@lemmy.world · 1 pts · 35d
I searched for you and it's actually worth it.
oopsgodisdeadmybad@lemmy.zip · 1 pts · 35d
Iykyk
WhyJiffie@sh.itjust.works · 8 pts · 35d
even some IT pros are leaving it in, knowing well what it does. some people just couldn't care less.
Canconda@lemmy.ca · 2 pts · 35d
I'm not an IT pro but I am ashamed I didn't know this. I've spent a lot of time cutting up youtube links for shiz.
osanna@lemmy.vg · 6 pts · 35d
yup. I don't use the google apps for ANYTHING. Even on my tab/phone, I use a browser (orion, with ublock origin installed) to watch youtube. It's really annoying, but it's better than using their spyware app.
lyrial@anarchist.nexus · 4 pts · 36d
A problem I've had is people using those Google share links. I keep yelling them that I'm not clicking that link no matter how funny or interesting it may be.
BigDiction@lemmy.world · 2 pts · 36d
Traffic is roughly 70-80% mobile on most websites I know.
Blah463@thelemmy.club · 2 pts · 36d
This is why I use YouTube revanced. The features for it are great.
Blackfeathr@lemmy.world · 33 pts · 36d
I remember telling this to people on reddit and getting downvoted to oblivion while redditors squawked "who tf cares bro"
asmr@feddit.nl · 6 pts · 36d
We set up a bot on r/asmr to reply to anyone posting a YouTube link containing the "si=" parameter, warning that it was likely a tracking ID that Google could potentially use to tie their YouTube account to their Reddit account with some degree of probability and suggesting that they delete their post and re-post without the si= parameter. Many were grateful for the warning and info but some didn't care. We decided to disable the warning after a few weeks.
WhyJiffie@sh.itjust.works · 3 pts · 35d
why did you disable the warning?
v4ld1z@lemmy.zip · 4 pts · 36d
fitting
tigeruppercut@lemmy.zip · 4 pts · 36d
I first heard about it on reddit but it was before the API exodus, so...
cereals@discuss.tchncs.de · 31 pts · 36d
On android, urlcheck is a great app to modify URLs before sharing or opening. For this problem, you can use the json editor, and add the following two entries with small a regex I wrote:
A button to shorten the link appears in urkcheck when the pattern matches. You can all auto shorten them by replacing "enabled": true
With
"automatic": true
codapine@lemmy.zip · 6 pts · 36d
Wow. This is awesome. Thank you! I will have to see if the dev has a donate button.
FWIW I had to noodle with the spacing of your json after copying from Lemmy (Voyager android app) but I got it to work. Thanks for sharing!
chunes@lemmy.world · 22 pts · 36d
til people don't reflexively strip out everything after the ? unless you know exactly what it's doing
mrgoosmoos@lemmy.ca · 21 pts · 36d
tbf, it's intentionally designed to be malicious and deceiving
irelephant@lemmy.dbzer0.com · 3 pts · 35d
Hey look at this video: https://youtube.com/watch
osanna@lemmy.vg · 2 pts · 35d
yup. all you need is the v=vkjlhaswlikuj3hg4 thing. that is the only thing you need, as it identifies the video. Strip everything else.
WhyJiffie@sh.itjust.works · 1 pts · 35d
most people don't even know what an URL is, and how it's structured. if their browser does not remove the tracking parameters, they won't get removed.
AlteredEgo@lemmy.ml · 21 pts · 36d
It would be great if link cleaning and auto-mirroring was part of the lemmy UI itself.
schnurrito@discuss.tchncs.de · 18 pts · 36d
The problem is that there is an almost infinite way to design these kinds of URLs, so maintaining a database of what should be stripped out isn't trivial.
locuester@lemmy.zip · 3 pts · 36d
Yeah, would be best within particular client implementations. Not core Lemmy tho. Too many ways to do this and high maintenance.
ExperimentalGuy@programming.dev · 3 pts · 36d
I think that would probably be a client implemented feature, not a Lemmy one. I also don't design social medias, so I don't really know.
AlteredEgo@lemmy.ml · 1 pts · 36d
Yeah "lemmy-ui" is the official web app for lemmy. There might be other web frontends or clients that already do this.
JordanZ@lemmy.world · 19 pts · 36d
anon_8675309@lemmy.world · 3 pts · 36d
I have an iOS shortcut that remove exit meta data.
kent_eh@lemmy.ca · 3 pts · 36d
That's one of the first things I did when configuring my kids phones.
Scrollone@feddit.it · 17 pts · 36d
Additional PSA: TikTok does the same. Also Instagram, but in my experience it doesn't reveal the sharing user (yet).
psx_crab@lemmy.zip · 18 pts · 36d
Insta does. if you open it on web and you didn't log in, the popup that beg you to log in will also include the user who shared it.
Scrollone@feddit.it · 5 pts · 36d
What the fuck
Linearity@piefed.zip · 10 pts · 36d
Instagram absolutely does reveal the sharing user
Scrollone@feddit.it · 1 pts · 36d
Holy moly, better pay attention
partofthevoice@lemmy.zip · 16 pts · 35d
It should be common practice if you commonly share links. Try removing the query string (everything after and including the question mark). See if you get to the same page. If you do, don’t use the query string.
Query string parameters are rather often used for tracking. Look for gclid parameters after you click a google ad, for example.
Dymonika@lemmy.ml · 3 pts · 35d
The harder ones to bypass are Facebook and Reddit share URLs, which give zero indicator of their destination; it seems impossible as the recipient of such a URL.
At least with bit.ly, one can add a
+to the end of the URL and see data on it, including the original link (to then safely access without adding to its click counter).partofthevoice@lemmy.zip · 2 pts · 35d
Yeah, there are always ways… any service could easily generate unique paths that require a server-supplied redirection to the main target. Then the server just needs to stitch up (1) where was that link generated and (2) who arrived at the redirection page. Users would have no way to determine the target link without exposing themselves to being tracked.
A platform like Reddit can do this too, by replacing the links you put in your comments/post, so they redirect to the original link. They can even make it continue displaying the original link, while actually linking to the redirect page.
Dymonika@lemmy.ml · 2 pts · 33d
Right, I've seen Slickdeals and I think Bing eventually take that on over the years: on-mouse-hover shows the original link, temporarily, until you actually right-click and copy, at which point the evil reveals itself lol.
Hmm... now I wonder if a browser add-on could circumvent the right-click interaction and stealth-copy the originally displayed link... lol, it's nuts how far into the weeds of privacy our guerrilla warfare has been getting.
cerebralhawks@lemmy.dbzer0.com · 15 pts · 36d
I just share the URL from the browser.
Even on mobile: I don't use the YouTube app. On Android, this is a no-brainer, since you can run Firefox and uBlock Origin and bypass all the ads. On iOS it is a bit more dicey, but still advantageous to forego the app. Currently DuckDuckGo can bypass the ads for free. If you don't mind paying, Wipr2 can also do it, in Safari. Then you just put a web shortcut to YouTube and bam, ad-free YouTube. Shitty icon though (it's the regular icon in a white squircle). Either way, share from the browser, not YouTube.
Also, of course you can remove all the extra shit from the URL if you know how. That wisdom is lost on younger generations, but innate to older ones (who grew up around tech, like Millennials; or younger Gen X who adopted it at a young age — not like these iPad babies you have now).
XeroxCool@lemmy.world · 6 pts · 36d
I don't see how it's a generational thing. I remember when every link included the page type at the end, meaning there was nothing that could be truncated. If you don't know what si stands for or don't know that anything after a ? Is tracking bullshit, then you simply don't know. It's a "knowledgeable person" thing that can be learned at any time. I've pointed it out and many people I know still don't care
schnurrito@discuss.tchncs.de · 4 pts · 36d
People who grew up when smartphones were already a thing might never have needed to learn how the Internet and URLs actually work. To a lot of everyday users nowadays, the Internet is just a series of smartphone or tablet apps you switch between. I used to think that the spread of the Internet into more segments of society would create a society of computer nerds, ha ha ha ha ha nope.
XeroxCool@lemmy.world · 1 pts · 36d
Sample the people around you in real life. They don't know any better, regardless of age. The group that experienced it has already largely forgotten it because the link purpose got obfuscated and the need became obsolete in everyday use
chuckleslord@lemmy.world · 4 pts · 36d
As a web developer, everything after the ? is actually parameters for the request. Anything could be in there, even important stuff (though hopefully nothing identifying, since that is extremely unsecure). You will likely break functionality if you delete everything without knowing what it is.
black0ut@pawb.social · 5 pts · 36d
Usually parameters are easy to understand. Like the time parameter in yt URLs, which is t=180 (meaning 180 seconds from the beginning of the video). Usually, parameters that are a string of seemingly random letters are UIDs or tracking parameters. Whenever I see a URL with one or multiple of those, I start deleting them and seeing if the URL still works. In 90% of the cases, it still does. Amazon is one of the worst offenders, with usually 4 or 5 random looking parameters that can be deleted without affecting the functionality of the URL.
asmr@feddit.nl · 1 pts · 36d
t= is the only useful parameter in YouTube URLs (that I know of). If not for that we could just strip all of the parameters out.
mrgoosmoos@lemmy.ca · 3 pts · 36d
if it's obfuscated, then it's assumed to be malicious
binux@sh.itjust.works · 2 pts · 36d
People can't even unanimously agree on when each generation starts and ends (see terms like "zillenial" or "xillenial") so I'd even go so far as to say it's a completely redundant concept in the colloquial sense. Obviously most people care more about continuing to use the "kids these days" rhetoric so it hardly matters regardless, but it doesn't make it any less ridiculous.
XeroxCool@lemmy.world · 1 pts · 36d
Blurry deliberations are typical. As time goes on, "millennial" will become more accurate as the differences between xennial and zillennial become smaller and smaller in comparison to differences between _ennial and alpha or beta or delta. I just take issue with acting like direct url interface was the experience of a generation, and not a short-lived blip for the gen pop that has already been forgotten, especially as full url purpose has shifted to something arguably evil.
binux@sh.itjust.works · 1 pts · 36d
Yes, though my point that I wanted to add is that people seem to treat generational terms as if they’re a fact of reality instead of a very shaky conceptualization of cultural differences between birth groups that are already influenced by a lot more factors than just when people are born. It’s much more of a spectrum than a strict range of demographics inherent to humanity.
Chaunticleer@lemmy.dbzer0.com · 15 pts · 36d
Here's another. If the video you want to share is on youtube, it's also on invidious. Without ads, downloadable and just generally none of youtube's bullshit. It even uses the same video vURL address.
vogi@piefed.social · 6 pts · 36d
tbh I would still prefer receiving the raw youtube link so everybody can redirect it to their preferred way of watching e.g. Morphee. Invidious instances can go down or stop working.
lyrial@anarchist.nexus · 3 pts · 36d
I haven't had a positive experience with an invidious instance in years. They are usually either down or horribly slow for me.
vogi@piefed.social · 2 pts · 35d
Me neither. Even tried to host it locally at home it the hopes that a private IP would go under googles radar, but after a month or so they blocked me as well. Same goes for LibreTube NewPipe and what not. All just fail on me after a while. The only way is to make it usable with uBlock + Unhook and Morphee Patches on Android. Its honestly not a bad experience except for the added
setTimeoutwhen Youtube notices. :)x0x7@lemmy.world · 14 pts · 36d
On my forum, youtube links get stripped of any extra url parameters. Every site should have to do that.
nulluser@lemmy.world · 10 pts · 36d
That's a great extra layer of protection, but people shouldn't rely on it and get/stay in the habit of always removing the tracking code themselves.
Buddahriffic@lemmy.world · 2 pts · 36d
Yeah, it's easily possible to set it up to save the original link somewhere hidden. Same reason why you shouldn't reuse passwords because it's trivial to set up a site to look like it's doing it right from the outside but actually saves all passwords in plaintext for owners, admins, or disgruntled staff to look at later and see if it logs in to your email.
asmr@feddit.nl · 9 pts · 36d
Since 4 March 2026 I am seeing "is=" in some YouTube links instead of "si=", also with the 16 character ID.
fatcat@discuss.tchncs.de · 8 pts · 36d
Facebook and Instagram do the same btw. Just FYI.
mild_deviation@programming.dev · 1 pts · 36d
TikTok too, actually. They’re just more clever about it by generating a slug when you share a video, so you can’t just lop off the end.
Aedaz_@lemmy.zip · 8 pts · 36d
Not sure if my anxiety is justified here, but I am not tech savvy whatsoever. And I worry about all the things I’m doing that’s probably completely giving myself away that I’m just unaware of. I didn’t know about this at all.
mrgoosmoos@lemmy.ca · 5 pts · 36d
pretty much everything that has a "share" button does this. it's not to help you share the link more easily than copying from the address bar - it's to harvest your data
Buddahriffic@lemmy.world · 4 pts · 36d
Even voyager gives a link to vger.to when you hit share instead of a direct link to the thing you want to share. No idea what they are doing with it (other than trying to redirect it to the app). Maybe it's set up to just use the localhost and that's all it does, but I usually strip that part out because I have no idea either way.
aeharding@vger.social · 3 pts · 36d
vger.to solely exists so i can text dumb memes to my non tech inclined friends, and they open in voyager on their device instead of the web.
It’s a dumb service and has zero analytics other than cpu disk bandwidth use lol
irelephant@lemmy.dbzer0.com · 2 pts · 35d
Would you be able to add an
open in browserbutton, or a way to just copy the normal link as well? I can't see any way to do it in voyager. It's probably my only issue with it.Buddahriffic@lemmy.world · 2 pts · 35d
Yeah, this is why that vger.to link is so annoying for me (other than triggering the reaction to the dark pattern, even if it isn't exploiting it like what seems to be the industry standard these days), because most of the time when I use the share thing, I'm really just trying to get the url to open it in my browser, so that "open in voyager" link is the exact opposite of what I want, though I can see how it might be nice for actually sharing the link with others.
aeharding@vger.social · 1 pts · 35d
Yeah you can change default in Settings, or if you’re sharing a post you can long press the share icon in the post bar right under the post to select on demand
voyager event supports sharing via author, community, or your own instance.
Zedd_Prophecy@lemmy.world · 3 pts · 36d
It is . But now you know . Don't freak - and you might even learn how to install a privacy based browser, vpn, or operating system. Keep the tinfoil har dude and best of luck
Aedaz_@lemmy.zip · 1 pts · 36d
I do use a VPN, but tha'ts about it.
daniskarma@lemmy.dbzer0.com · 6 pts · 35d
You should also known that TikTok does this by default and the generated code is impossible to remove afaik, it's part of the video identifier.
So when sharing a tiktok video always download it and share the file.
irelephant@lemmy.dbzer0.com · 2 pts · 35d
I recommend downloading it anyway, since that doesn't require people to use tiktoks site, but if you paste the vm link yourself into a browser, it'll redirect to the canonical link, without the tracker.
sunbytes@lemmy.world · 5 pts · 35d
Done. Thank you.
Pika@sh.itjust.works · 5 pts · 36d
I never knew users could get the profile from it, I always thought that was a youtube internal thing. thats not cool
Anivia@feddit.org · 7 pts · 36d
It's a very recent change
cypherpunks@lemmy.ml · 1 pts · 36d
i would be surprised if it is true that "If you don’t remove that it shows your personal account to anyone who receives it so that they can chat directly with you", and a search just now didn't find anything to substantiate that.is it though? if so, how do you actually find out the profile name from thesiparameter?obviously tracking parameters from URLs should be removed in any case, but afaict only google can use this to find which user generated the link.after some more reading i found conflicting reports but i think this might actually be happening; apparently it is only visible in the app?
master_of_unlocking@piefed.zip · 3 pts · 36d
I’ve seen it when opening shared links in the browser but it’s possible that you need to be logged in for it to show
theherk@lemmy.world · 4 pts · 36d
Get YouTube Sharing URL sans Sharing / Tracking Code (for iOS users)
Saltarello@lemmy.world · 3 pts · 36d
If it helps, for Androids share YT link to something like Untracker to remove unwanted nonsense from the url which you can then pass on safely (also works for things such as Amazon links).
For images, share to something such as Imagepipe first to remove location data. Other apps such as Aves Libre gallery or image Toolbox also strip this data but Imagepipe is simple - share image to it & it passes the image directly to your messaging app after stripping the data
Krompus@lemmy.world · 3 pts · 35d
FYI on desktop you can right click on the video and select "Copy video URL", it doesn't include the tracker string. Wish they'd let us remove it from the Share button, I've simply removed that button with uBlock Origin.
It's also missing from my patched YouTube app's Share on Android, not sure if that's one of the patches.
Dymonika@lemmy.ml · 2 pts · 35d
Yeah, that's certainly a patch. NewPipe, PipePipe, etc. all also remove
?si=.Dryad@lemmy.world · 3 pts · 36d
Might not solve everything, but a good link cleaner utility is helpful too. I personally use this one: Trackless Links
BastingChemina@slrpnk.net · 7 pts · 36d
I use Leon:
https://f-droid.org/packages/com.svenjacobs.app.leon
root@aussie.zone · 2 pts · 35d
I use this on Android to sanitise links I sent out as well as clean incoming links before viewing them.
https://play.google.com/store/apps/details?id=com.svenjacobs.app.leon
Sam_Bass@lemmy.world · 2 pts · 35d
i have never shared a youtube vid while logged in
this@sh.itjust.works · 2 pts · 36d
It can't share my personal account if I'm never signed in.
NewNewAugustEast@lemmy.zip · 2 pts · 35d
If you never sign into YouTube and sharing links from a third party application, what is it that they append? Curious what makes up that shared id.
altphoto@lemmy.today · 1 pts · 36d
Is
lazycouchpotato@lemmy.world · 2 pts · 36d
I've seen YT links with both
siandis.master_of_unlocking@piefed.zip · 3 pts · 36d
Yeah I’ve only seen si but that’s good to know
nieminen@lemmy.world · 1 pts · 35d
https://f-droid.org/packages/com.svenjacobs.app.leon
I use this, and it works really well for the big apps and services.
Dymonika@lemmy.ml · 6 pts · 35d
That app seems not as transparent as it could be since it doesnt give any detail on the removed stuff; I recommend URLCheck instead, which is fully transparent about all trackers and even lets you pick which ones to remove at will.
irelephant@lemmy.dbzer0.com · 1 pts · 35d
vm.tiktok.com links do the same (they give a popup with the user that shared it). If an Instagram url has the
igshidorigsh(can't remember which one), it can do the same.username@piefed.zip · 1 pts · 32d
I share everything through URLCheck on Android. You can also set it as your default browser to clean every link you click as well.