Posted 2 years ago #
Today, I visited my blog while not logged in and for the first time, I noticed that the Quantserve tracking code was present.
I never added this code to my blog so I started investigating and it turns out that it was injected by the WordPress.com plugin.
When was this added as I was not aware of it and is it really necessary? The plugin worked fine before this change and I really don't want the Quantserve code to load for my website visitors.
Posted 2 years ago #
We're going to use this to provide some cool features around uniques and people counting.
Posted 2 years ago #
Thanks for the quick reply Matt!
I don't really want a script that sets a third party tracking cookie in users' browsers like Quantcast loading on my site although I'm looking forward to the upcoming features around uniques and people counting.
Posted 2 years ago #
I found this too.
Add most important is that the script from quantserve.com is loading very slowly.
I want this script from quantserve.com off my site.
I'm wondering that if you developer could provide a choice for us to decide whether use it or not???
Posted 2 years ago #
It should load even faster than the main JS. It can't be an option, it's required for the functionality we're planning.
Posted 2 years ago #
The main problem I have with the Quantcast code is that I'm working on page speed right now and it makes 1 request each to 3 different hosts, meaning 3 extra DNS lookups and 3 requests in addition to setting cookies.
edge.quantserve.com (JS file)
pixel.quantserve.com (302 Redirect to the next one)
segment-pixel.invitemedia.com OR cms.quantserve.com
Posted 2 years ago #
My team and I are with Brian on this -
We've had the most absolute devil of a time getting a new site build's templates to settle down and function as designed - We finally tracked it down to conflicts with the quantserve javascript that were causing the entire footer to appear inside the header zone. It was also causing some real bitch headaches with the css names too. Not to mention the cumulative resource overhead it's been building on our active sites' servers.
Matt - this is yet another intrusive and unwanted addition to WordPress - (this time via a WordPress maintained plugin) - was this SPYWARE injection discussed on trac BEFORE inclusion? If not, why not? It goes completely against the transparency requirements of the open source declaration. Why is there no mention of this footer script injection on the plugin page? What are you hoping to garner by hiding this addition?
This is starting to happen too frequently with WordPress - issues like the involuntary_P_dangit rewriting that broke URLs, this new SPYWARE in the footer, making a total balls-up of the VHOSTS function in the 2.9.2 to 3.0 merger, and other issues, are destroying your credibility as a paladin of the open source community. As my grandmother used to say, "You need to buck up your ideas young man, before you find yourself with no friends." And as my mother still says to me now, "You're never too big for a boot in the seat of your pants."
This footer script is not an acceptable action Matt - I'll be pulling this plugin off all our sites and switching to an alternative stats solution - I DO NOT want an unmonitored 3rd party recording all our visitors actions on-site, the keywords they use to get there, and those they use to navigate internally, and I most certainly do not want an online behavioural analysis group like quantcast.com monitoring activity on our sites without the express permission of myself and our site users.
We'd wondered why our LAN's antivirus layers had started rating our sites with a yellow icon - now we know.
I particularly do not like that you tried to camouflage this behind a wp.me short link so that searching the code did not find quantserve or quantcast in any of the files or templates - you do realise you have just shown hackers and other miscreants how to hide their activity - don't you?
That's another reason to ditch all usage of, and permissions to include, url shortening services on all our sites - as a preventative measure to stop others following your example. Have you not been following the news about short url's as routes to malware injection on twitter and facebook? I am severely disappointed in you introducing this major security threat.
Posted 2 years ago #
I received a notice email about new comments from gazouteast; where is it?
Posted 2 years ago #
LOL - although I can still see what I posted, I wouldn't be surprised if the WP reputation protection squad have hidden it.
The bit I forgot to add, was to ask how many millions of web sites' data is now passing through the servers of a commercial, online-behaviour analysis and market-targeting company?
... and dare I add?
How much is Akismet / Matt / WordPress getting from that deal?
(I include Matt in that because the plugin is now "claimed" and attributed to Auttomatic rather than the original author.)
Posted 2 years ago #
I've never seen the stats pixel mess up a layout -- you should contact support@wordpress.com. There's no financial aspect to stats.
Or... turn off the stats plugin? :)
Posted 2 years ago #
It got caught in the spam queue, it happens sometimes, even to regular legitimate users, i've unspammed the post for you, please try not to jump to conclusions.
Posted 2 years ago #
Matt - I don't think it's the pixel itself, but the Tolstoy-length mess of javascript in the footer, that's revealed in its full glory if you use FireBug to show the CSS behind the page layup.
As soon as the stats plugin was removed, the layup went back to how it should behave, and the footer went back to the bottom of the page instead of sitting in the header. Leaves me wondering if the wp_enqueue doesn't like something in the quantcast javascript and it pulled the footer back up into the header because of it.
Theme is a heavily reworked "Modern Style" from the themes repository - heavily reworked due to a large number of custom post types and taxonomies, and due to "uniquefying" the displayed output for each post type within overall normal archive and category output lists.
We're really hoping you have some good things for CPT and CTT UI's coming in 3.1 - trying to find a balanced and non-conflicting set of plugins to do the job, has been a real pain in the neck - we ended upcustom writing a whole bunch of templates, a big chunk of functions.php and Lord knows how many other bits and pieces - for a site that in all honesty should have been designable, buildable, and deployable in under 3 days - it's taken over a month so far, and likely won't complete until the end of the week.
@Mark - many thanks for that - I can see a couple of words in there that might have triggered the spam trap - must remember not to use them in future.
Gaz
Posted 2 years ago #
Make an option to host the quantserve script locally. So, it will reduce DNS querry and after certain time the script should be refreshed from quantserve main script.
Posted 2 years ago #
Would rather the plugin was left with a "lite" version without the QuantServe mess in the footer - it has all I need without the quantcast stuff in it ... bit like the option WordPress gave to the plugins that had link cloaking in them - lose the cloaking and you can keep it in the repository as a "lite" version, or keep it and you have to host it on your own site.
.... what's good for the goose?
It might be pretty useless, but i would like to protest the use of quantcast as well, because;
I really love the simple, straightforward functionality the WordPress Stats plugin provides. Adding "cool features" is great, but do provide a Quantcast-free version for those of us that don't want all that tracking on our blog(s)!
awfully quiet round here ...
let me add some more arguments against the inclusion of quantcast, this time from the perspective of stats reliability:
all of this means that even now at least part of a blog's visitors are not trackable by quantcast (and others) and that with IE9 and the FTC's actions, the number of do-not-track users will become even more important over time.
the conclusion: quantcast-based wordpress-stats are not only a problem from the point of view of privacy and performance, but also from a data-reliability point of view as a growing number of visits will never be included in these "cool features around uniques and people counting".
looking forward to a more transparent & open discussion with the automattic-guys!
Posted 2 years ago #
I have to agree with futtta. There is nothing on the WordPress.com Stats download page even mentioning third party tracking in addition to the fact that Quantcast is being added to a lot of anti-tracking lists and would be unreliable.
I installed WordPress.com Stats from the beginning because I liked the simplicity of it. Now, its the only script on my site that needs to load synchronously because of the use of document.write. I have ran many tests and the WordPress.com Stats (combined with Quantcast) take longer than the rest of my page to load.
In addition, I also installed WordPress.com stats because it did not set any cookies whatsoever. Now with Quantcast, it sets a cookie under my domain name as well as their own quantserve.com which is detected by most anti-malware products as a 3rd party tracking cookie.
I want to continue using WordPress.com Stats but lately some unnecessary features have been added including the wp.me shortlink which I don't need as I have my own shortlinks.
I would love to see a "lite" version as well with just the basic Stats like it used to be without any of the other stuff. I don't need a unique visitors feature with WordPress.com Stats. I have Google Analytics and CloudFlare to do that (both of which don't use unnecessary third party services).
Posted 2 years ago #
If Auttoic are not willing to release a "Lite" version without the quantcast trojan, then the least they could do is make a confirmatory announcemnet regarding which was the last version of the plugin to not include it.
This would allow webmasters to roll-back to that version, ammend the php file to a ridiculously high version number (avoiding upgrade notices in wp-admin, and get on with life, enjoying the plugin as it was before this nonsense emerged.
This topic has been closed to new replies.
