94

I was startled to discover recently that the the "share" links on questions include one's account ID. Luckily, no harm came of it for me -- I've only shared StackExchange links in a professional context -- but I know that not everyone would consider it safe to reveal their SE identity when linking. (E.g. they might have their real name attached to SE, but not to the context they're linking from.) This becomes more and more relevant as SE expands into new topics.

I think people assume that by sharing a SE link they are not revealing their identities; how can we support this assumption, or at least make it very clear that the assumption is incorrect?

Edit: To open up the discussion, I've posted my initial thoughts on options as answers. (Also, if this should be a instead of , let me know -- or just change it over. This is my first time interacting with the Meta side of things.)

14
  • 1
  • 1
    One can anonymize "share" with a userscript but of course this doesn't help those who are unaware of how the links work.
    – user3717023
    Commented Jul 30, 2015 at 4:52
  • 1
    This has been requested before and denied, let me see... there really should be a switch to turn the referrer ID off and on.
    – Pekka
    Commented Jul 30, 2015 at 7:16
  • 1
    Related: meta.stackexchange.com/questions/74274
    – Pekka
    Commented Jul 30, 2015 at 7:17
  • 1
    This is a really good point. I'd never thought of it this way. Commented Jul 31, 2015 at 21:13
  • 9
    It's worth keeping in mind that links can be copy/pasted from anywhere. That someone posts a link to some SO content in some other forum, does not necessarily mean that the ID embedded in that link is actually that of the person who is posting the link. It's true that it commonly is; but the person might have found the link in some other context, where the owner of the ID provided it. I don't think it truly de-anonymizes the user unless additional analysis is applied, and as a lot of research has shown, "additional analysis" in general will de-anonymize, regardless of specific features. Commented Aug 1, 2015 at 0:45
  • 3
    Honestly, I can't see where this would be a problem. As far as I have seen people always feel comfortable/not comfortable associating their names based on the topic, not the site. If for example you don't feel comfortable associating your name with your interest in scifi you won't do it on here either and thus when you share a link it won't contain any 'bad' information. And if you do feel comfortable about it, then there is no problem in the first place right? Commented Aug 1, 2015 at 13:33
  • I remember this being discussed on the Mathematics meta (or maybe Math Overflow). I'm having trouble finding the link... Commented Aug 1, 2015 at 14:23
  • 5
    -1 -- If you are so paranoid about anonymity you already know this and how to work around it or if you are in a situation where anonymity is so fundamental you must carefully take all the time required to avoid this kind of problems (e.g. posting using a "fake" account with a random string as name, registered with a brand new email not resembling your name via Tor, from a public internet café from a city you chose randomly a random amount of time before and being careful to write in a way that nobody could recognize your style of writing).
    – Bakuriu
    Commented Aug 1, 2015 at 14:28
  • 5
    +1 I never realized the share button included my user id. I can think of serveral situations where this could have potentially made a difference for me if the other person had noticed... Commented Aug 1, 2015 at 14:45
  • 3
    I think this is a small enough issue not to be worth cluttering up the interface with checkmarks, but it doesn't seem like it would hurt to throw some simple kid-sister proof encryption on the user ID.
    – Jack M
    Commented Aug 1, 2015 at 23:29
  • 5
    Maybe give every user another unique identifier (or hash the existing uuid, but that would make the link longer) that could be used in the links, and is never displayed? That way, those who work at SO know who shared the link, and those who don't wouldn't know. (this may be overkill)
    – Jojodmo
    Commented Aug 1, 2015 at 23:47
  • 1
    @Bakuriu Not interested in discussing "paranoia" or whether people "should have known". That's out of scope: I already know 5 people who "should have known", did not, and are sad about it. It's a bad UI, and I want to discuss a way to move forward. Commented Aug 2, 2015 at 15:42
  • OK, I'm going to take a different approach -- splitting up ideas into the Answers section. Commented Aug 2, 2015 at 21:41

6 Answers 6

52

Option: Add a checkbox to include/exclude the user ID ("Give me credit [?]"). Here's what it would look like at baseline, and when the user hovers over the "[?]":

"Share link" popup includes new checkbox Hovering checkbox question-mark shows explanation

This approach gives the user a choice about whether to include their user ID. Checking the box on and off would toggle which link is displayed in the text field and used in social media buttons, which for many StackExchange sites (with shorter names) would be a visible change. This is also a place to direct the user to an explanation of why they would want this.

The checkbox would default to on, but the setting would persist in a cookie or account preference.

This is my personal favorite option, since it educates, provides a choice, and keeps same sharing functionality for most users.

1
  • 2
    Love this. The checkbox could also go at the top, replacing "(includes your user id)" text. It should be labelled "Include your user ID" (to be clear it's yours, not the OP's). It could also be labelled "Earn badges by sharing" or something like that (then the help text explains "share link includes your user id for tracking and rewarding badges").
    – ADTC
    Commented Apr 8, 2018 at 5:20
19

A very small solution will be rolling out for this very shortly:

enter image description here

It doesn't give you an option for whether or not your user id should be included, but at least it will help keep people from inadvertently sharing that id without realizing it.

Rather than let this sit unsolved for even longer while we figure out (read: argue about) exactly what this box should be for and what functionality it needs to accomplish that, we have just made a little copy change that should hopefully resolve the accidental privacy issue.

There are certainly other things we could do with this module, including many of the suggestions made here--giving people the choice whether to include the id, explaining about the Announcer badge, etc. To that end, folks are still welcome to make suggestions about this box's functionality and design, of course. I'd just recommend doing so in a new for the sake of clarity.

5
  • 5
    This is good. How about a adding a super small link to the copy to fix the entire issue, (includes your user id - remove)? (with "remove" being an underlined link)
    – Pekka
    Commented Dec 1, 2016 at 17:59
  • 4
    I'm confused as to what the solution is. Was it just to say '(includes your user id)'?! Isn't it too small and counter intuitive?!
    – mfaani
    Commented Apr 4, 2018 at 15:59
  • 1
    phyzome's option of having a checkbox with a help text sounds much better than this. Initially it could just use Javascript and cookies to store the current selection in browser, but eventually (if there's demand) it could be AJAX-ed into the user profile as a profile setting (overriding any cookies).
    – ADTC
    Commented Apr 8, 2018 at 5:12
  • Just don't copy the final slash and any number after it.
    – S.S. Anne
    Commented Oct 20, 2019 at 0:52
  • 1
    agree with @‌mfaani. apparently this already implemented in 2016 according to this post's date, and I just see it recently. definitely not good and it's even worse today. The link is pre-selected, the "Share a link to this answer" is in bold, the share buttons (Copy link, social medias) use the link with userid. Commented Apr 18, 2023 at 16:35
12

Originally share was called link and it was just that, a link to the question/answer. I remember the rename and it annoyed me because share is a very poor name. Link is a good name because it describes what it is, share is a bad name because it only describes a possible use of the item. And it is misleading as well because the name implies that that you will actively share it to someone when you click share which is not the case at all. For this reason alone I would like share to be renamed to share-link or share link.

Having share links is not bad per se, but the users should be able to chose (for instance if putting links in comments in corporate source code, personal links might not be appropriate).

A checkbox as suggested might work, but will make the non-default option cumbersome. Profile setting is just too static and makes it way to cumbersome to switch. Why not provide both options at the same time and let users choose what they want directly:

share-link plain-link edit close flag

This adds no complexity in configuration of any kind and it is super obvious for users at all levels - including first time users - that a link to the same thing exists in two variations. As a bonus this will be extremely simple to implement.

1
  • Yeah, share is a weird name for this. It should be link. They’re catering to the MySpace crowdlings or something.
    – tchrist
    Commented Aug 3, 2015 at 14:15
10

Option: Add a profile setting (defaulting to off!) that includes the user ID in these links. Users who want the relevant badges (e.g. Publicist) can turn it on.

(As OP I don't like this one, but I'm including it for completeness and if someone wants to expand on it that's fine.)

9

Option: Include the user ID in a way that does not allow anyone but SO to identify the user (AES + HMAC + a bunch of entropy.)

By including the user ID in this way, users don't have to worry about deanonymizing themselves under normal circumstances, but the site still collects the data. (A security breach or a cryptography failure could still lead to this.)

Bear in mind this would not be a simple hash of the user ID. There are not many user IDs (on the order of a million?), so building a table of hashes would be trivial. The link would need to include entropy under AES+HMAC or similar so that shared links cannot be correlated across sites. This would make the URL a bit longer.

0
1

In addition to Treat your mods well's answer, could you also edit the tool tip to tell the user id will be embedded? I usually right-click on share links, I didn't see this feature and figured it out after a reward...

It can indeed be annoying if you want to separate your accounts between websites.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .