Live data from Hacker News

Consent-O-Matic – automatically fills ubiquitous pop-ups with your preferences

consentomatic.au.dk

1–10 of 147 posts

Re: Consent-O-Matic – automatically fills ubiquitous pop-ups with your preferences

#2
I’ve been using this for a couple years now, and absolutely love it. Thanks, team!

I also love that it’s owned by the University of Aarhus, as I am more willing to trust academia with something that has a disturbing level of (client-side) access to my browsing data.

I really wish the browser vendors would develop better permission models to guarantee my data can’t be exfiltrated by a malicious plugin (aka a once-good plugin that got bought out by a bad actor).

For example, I’d love to see the browser impose a policy of “no outbound network requests except to pre-registered endpoints with pre-defined headers and data payloads”, so that plugins could fetch allow lists but could not exhilarate my browsing history.

Re: Consent-O-Matic – automatically fills ubiquitous pop-ups with your preferences

#5
I've been using the annoyingly-named superagent for a while for the same task, but it often seems to fail to detect some of these annoying boxes. I'll definitely give this alternative a try and see if it works any better.

Thank you so very, very much to the EU and whatever other government agencies are responsible for making the web more annoying to use.

https://super-agent.com/

Re: Consent-O-Matic – automatically fills ubiquitous pop-ups with your preferences

#6
post #2

I’ve been using this for a couple years now, and absolutely love it. Thanks, team! I also love that it’s owned by the University of Aarhus, as I am more willing to trust academia with something that has a disturbing level of (client-side) access to my browsing data. I really wish the browser vendors would develop better permission models to guarantee my data can’t be exfiltrated by a malicious plugin (aka a once-good…

It is very hard to prevent exfiltration by code that is allowed to write to the DOM in today’s browsers.

There is Content Security Policy (csp) which applies to the whole page and sometimes governs scripts injected by extensions but not the extensions themselves.

I would love to see browsers add a chain-of-custody to scripts and DOM nodes, so it is easy to tell which nodes were added/touched by a script, and if a script adds a script tag, that newly loaded script would show up as branches in the custody tree. Then we could say, “no nodes or scripts in this tree may trigger requests to unauthorized domains”. It would be sort of like CSP, but with a runtime-tracked implicit capability/taint for extensions.

Re: Consent-O-Matic – automatically fills ubiquitous pop-ups with your preferences

#7
post #2

I’ve been using this for a couple years now, and absolutely love it. Thanks, team! I also love that it’s owned by the University of Aarhus, as I am more willing to trust academia with something that has a disturbing level of (client-side) access to my browsing data. I really wish the browser vendors would develop better permission models to guarantee my data can’t be exfiltrated by a malicious plugin (aka a once-good…

while we're wishing for impossible things i'd also love if the consent dialogs were an actual standard. if sites could describe a list of what they needed consent for and the browser supplied the actual dialog, so i could just configure it to always allow all if i wanted to, that would be fantastic.

Re: Consent-O-Matic – automatically fills ubiquitous pop-ups with your preferences

#8
post #5

I've been using the annoyingly-named superagent for a while for the same task, but it often seems to fail to detect some of these annoying boxes. I'll definitely give this alternative a try and see if it works any better. Thank you so very, very much to the EU and whatever other government agencies are responsible for making the web more annoying to use. https://super-agent.com/

> Thank you so very, very much to the EU and whatever other government agencies are responsible for making the web more annoying to use.

They didn’t make the web annoying – advertisers did. They were the ones who chose the most annoying way to comply with the laws.

Post reply on HN