Live data from Hacker News

Things not available when someone blocks all cookies

blog.tomayac.com

121–130 of 231 posts

Re: Things not available when someone blocks all cookies

#121
post #28

Earlier quoted context omitted.

This is absolutely unacceptable. No. The solution to "software authors routinely collecting more info than they should" is not "accept the behavior as irredeemable, and just normalize it". The answer is "make ot way more visible to users when it is done, snd make it harder for software authors to do/maintain." Anything else is just a tacit acknowledgement and grant of legitimacy to the behavior in question.

Just the opposite. What this would normalize is app developers no longer be able to depend on location data being accurate, which would destroy the location data sales market by turning it into a market for lemons. What you propose, simply yelling at developers to stop requesting unneeded permissions, would have no useful effect. They won't change. And most customers won't care and will blindly click accept no matter…

Oh no, not the location data sales market.

Re: Things not available when someone blocks all cookies

#122
post #51
post #41

I often think that instead of completely blocking cookies, it would be better to accept them and then throw them away. Same with localStorage. Just store it temporarily.

I’ve been using Cookie AutoDelete for that purpose for the last few years. It works flawlessly for me and brings me comfort in knowing that I am only being tracked online by my browser fingerprint and IP. https://addons.mozilla.org/en-US/firefox/addon/cookie-autode...

[deleted]

Re: Things not available when someone blocks all cookies

#123
post #51

Earlier quoted context omitted.

I’ve been using Cookie AutoDelete for that purpose for the last few years. It works flawlessly for me and brings me comfort in knowing that I am only being tracked online by my browser fingerprint and IP. https://addons.mozilla.org/en-US/firefox/addon/cookie-autode...

Same, I absolutely love this extension. You can whitelist the websites you use frequently, and for everything else it's like a groundhog day every day. The cookie banners can be super annoying sometimes, but they are easily removed with uBlock Origin. I also frequently have to solve captchas, but it's not so bad. For example, every time I visit amazon.com to order toilet paper or whatever, it thinks I'm a bot, but at…

Pair it with "I don't care about cookies". This one clicks Accept on all cookie banners, and Cookie AutoDelete deletes them when the tab is closed.

https://addons.mozilla.org/en-GB/firefox/addon/i-dont-care-a...

Re: Things not available when someone blocks all cookies

#124
post #56

Earlier quoted context omitted.

Quoted post unavailable.

> Aside from that, what the heck is so important that folks need to cookie that can't be just tied to the session token in the backend? literally any functionality that needs to persist state and you want to use offline and between reloads? See also Progressive Web Apps (PWAs).

Using a username and password, or saving a bookmark to the current page both work.

Re: Things not available when someone blocks all cookies

#125
post #41

I often think that instead of completely blocking cookies, it would be better to accept them and then throw them away. Same with localStorage. Just store it temporarily.

I agree. Private browsing takes care of this for me. I close the tab, cookies are deleted, and I will randomly confirm this occurs occasionally just to be certain. There's no need to get all OCD or self-righteous about cookies when Javascript is the scourge. I can not respect any that block cookies but do not surf with Javascript disabled. Though html5 has nearly but not quite made Javascript irrelevant, the scourge seems to now be built in to html.

Re: Things not available when someone blocks all cookies

#126

Earlier quoted context omitted.

> Aside from that, what the heck is so important that folks need to cookie that can't be just tied to the session token in the backend? literally any functionality that needs to persist state and you want to use offline and between reloads? See also Progressive Web Apps (PWAs).

You can store the state in the URL, can you not? That used to be done anyhow.

I have written a web app that does this so you can share links which have the same state. You can't have that long of URLs actually - especially for some browsers.

Having to base64 encode most/all of it so you can safely use any kind of data makes it even worse.

My use case was very basic and I quickly hit limits that made it so I couldn't "persist" all of the data I wanted.

Re: Things not available when someone blocks all cookies

#127
post #17

> All I am using is some innocent localStorage and IndexedDB to persist user settings like the values of the sliders or the chosen color scheme. When you turn off cookies you're telling the browser not to let sites persist information. Otherwise, whatever goals you had in disabling cookies would just be worked around through these other technologies.

Especially with single-page applications, I would love for there to be a way for a page to have either access to persistent store or network connections, but not both. A site could load all resources, then announce to the browser that it would like to have access to whatever it stored the previous time. The browser would grant access to the local information, and simultaneously take away access from ever initiating a…

[deleted]

Re: Things not available when someone blocks all cookies

#129
post #17

> All I am using is some innocent localStorage and IndexedDB to persist user settings like the values of the sliders or the chosen color scheme. When you turn off cookies you're telling the browser not to let sites persist information. Otherwise, whatever goals you had in disabling cookies would just be worked around through these other technologies.

Came here to say this. If anything, a cookie that is not cross-domain is more innocent than localStorage.

What would make it "more innocent"?

Re: Things not available when someone blocks all cookies

#130
post #53

Earlier quoted context omitted.

That's basically incognito/private browsing mode.

Are there ways to do this while whitelisting sites where you want to retain and keep login tokens?

Firefox has this when you say delete browsing data on close, next to it is a manage exceptions button
Post reply on HN