Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Atlassian's Global Analytics Service (GASv3) API in Jira #2358

Open
AGhost-7 opened this issue May 7, 2019 · 6 comments
Open

Atlassian's Global Analytics Service (GASv3) API in Jira #2358

AGhost-7 opened this issue May 7, 2019 · 6 comments
Labels
enhancement help wanted heuristic Badger's core learning-what-to-block functionality

Comments

@AGhost-7
Copy link

AGhost-7 commented May 7, 2019

Noticed that some new endpoints appear to be sending data over to segment.io when using Jira, which isn't being blocked by privacy badger:

https://*.atlassian.net/gateway/api/gasv3/api/v1/p
Screen Shot 2019-05-07 at 12 01 35 PM

https://*.atlassian.net/gateway/api/gasv3/api/v1/t
Screen Shot 2019-05-07 at 12 03 05 PM
@bcyphers
Copy link
Contributor

bcyphers commented May 7, 2019

Is the issue here that Privacy Badger should be blocking the requests? If so, can you check whether "segment.io" is present in your snitch map at all? (just step 3 here)
@AGhost-7
Copy link
Author

AGhost-7 commented May 7, 2019

Yes, the issue is that I think Privacy Badger should be blocking those requests. It doesn't look like segment.io is in the map.
@bcyphers
Copy link
Contributor

bcyphers commented May 8, 2019

Possibly related: #367
@bcyphers bcyphers added the heuristic Badger's core learning-what-to-block functionality label May 8, 2019
@ghostwords
Copy link
Member

Looks like these are POST requests. Related to #794, which is probably about looking into GET request query strings.
@ghostwords ghostwords changed the title New Analytics API in Jira May 16, 2019
@ghostwords
Copy link
Member

If we were to implement this, we'd probably want to ignore user-initiated form submissions (#2221 (comment)).
@ghostwords
Copy link
Member

I think this is part of Atlassian's Global Analytics Service (GASv3).

https://www.atlassian.com/engineering/cloud-overview

GASv3 exposes an API that is used by all of our product analytic client libraries to transmit structured data into our pipeline.

So then this is first party tracking but maybe integrated into third parties on the backend?

Does segment.io show up anywhere in your browser's network tools when these "gasv3" requests are sent?

How would Privacy Badger know that these are tracking requests?
@ghostwords ghostwords changed the title Detect tracking via POST requests [New Segment.io Analytics API in Jira] Dec 1, 2023
@ghostwords ghostwords changed the title Blocking Atlassian's Global Analytics Service (GASv3) API in Jira Dec 1, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement help wanted heuristic Badger's core learning-what-to-block functionality
3 participants
@ghostwords @bcyphers @AGhost-7