31–40 of 114 posts
Wow. Try to opt out of their data tracking, an option they're required to add. "This may take up to a few minutes to process" They make you wait at this long ass loading screen while they "process" your request not to have cookies. Here's the outline for people who don't want to wait minutes to read an article. https://outline.com/TZSBv4
Earlier quoted context omitted.
I discussed this recently here on HN [0], the fake spinner is a dark-UI to 'punish' you for opting out. If you just accept the popup disappears immediately. [0] https://news.ycombinator.com/item?id=20131381
I don't think that's actually true. Rather, it's an architectural thing — because all these ad systems were designed without consent in mind, accepting is a no-op, whereas refusing consent requires an outbound request to set some sort of "do not track" flag somewhere (presumably as a cookie).
A brutal violation of course but I absolutely expect that to be the case.
Wow. Try to opt out of their data tracking, an option they're required to add. "This may take up to a few minutes to process" They make you wait at this long ass loading screen while they "process" your request not to have cookies. Here's the outline for people who don't want to wait minutes to read an article. https://outline.com/TZSBv4
That's grounds for a GDPR complaint against TRUSTe and Forbes. Opting in or out must not be a condition for accessing content, so a popup that covers the page is problematic. Opting out should also be as simple as opting in, not a maze of options with progress spinners. File a complaint folks.
Wow what a horrible website - the entire article was nearly completely covered with popover ads
Works also on mobile (Android)
IT security people need to stop thinking in terms of disallowing “unauthorized” devices on physical (wired and WiFi) and recognize start designing for human nature. Assume that the physical networks are compromised, and have all privileged resources only accept connections over VPN. Is it perfect? No, but it makes further compromise harder. The assumption of no trust also means acknowledging that you need gate incomi…
I can assure you that many, many security people (I would say all security people, but I have no doubt that there's some laggards working under the radar somewhere) already think like this. This is all part of a multi-layer security strategy, and having encrypted communication on top of a secured physical network is pretty standard and is what a lot of orgs strive for. Unfortunately, it really isn't feasible and it's not because of any decisions by the security people, because...
> have all privileged resources only accept connections over VPN
This sounds great until you remember that half of your organization runs on legacy software that doesn't play nice with forcing VPNs and your technical architect has informed you that they aren't planned to upgrade to newer software until 2030. This is especially so in government orgs (like NASA).
Earlier quoted context omitted.
That's grounds for a GDPR complaint against TRUSTe and Forbes. Opting in or out must not be a condition for accessing content, so a popup that covers the page is problematic. Opting out should also be as simple as opting in, not a maze of options with progress spinners. File a complaint folks.
Unless they geo-block GDPR countries and call it a day
Earlier quoted context omitted.
I don't think that's actually true. Rather, it's an architectural thing — because all these ad systems were designed without consent in mind, accepting is a no-op, whereas refusing consent requires an outbound request to set some sort of "do not track" flag somewhere (presumably as a cookie).
Why do you think it's not true?
I highly recommend reading the actual audit[1]. There's a lot of good details in there, similar to the Senate report on the Equifax breach a few days ago. There were several problems: the inventory tracking issue was particularly enlightening: >system administrators did not consistently update the inventory system when they added devices to the network. Specifically, we found that 8 of 11 system administrators respon…
Back in the early 90s I had a summer internship for a contractor at Goddard Space Flight Center. My job for the entire summer was to track down and inventory a list of 1000s of devices across the entire campus. At the time they were building a tracking database for all the devices on the campus. The printout I was handed on my first day had not been updated in several years. It basically contained a tracking ID, what…