I'm using auto-accept all cookies, and after I leave auto-delete all cookies. Then white-list only the cookies I actually need. That and use Firefox containers.
Sigh, this is what browsing the web in the EU looks like nowadays (2021)
111–120 of 197 posts
Re: Sigh, this is what browsing the web in the EU looks like nowadays (2021)
#112Disclaimer: I actually click through the "do not consent" procedure, which tells a lot about what I'm about to say. When the EU regulation came up, I was shocked that a single article was being shared with 100+ "partners". I knew it was bad, but I didn't know it was that bad. At least now I get the choice to opt-out. Sidenote: Google got fined for that pop-up because it should have a "do not accept" option [1]. Compa…
> Do you want to blame the EU for not anticipating that companies would act maliciously?
Yes, I think we should clearly hold legislators accountable for unintended consequences. And I think it would be crazy not to.
If the law didn't have the desired effect, and makes everyone miserable, we should fix or amend it.
Re: Sigh, this is what browsing the web in the EU looks like nowadays (2021)
#113Earlier quoted context omitted.
All they have to do is stop tracking us and only use login cookies if i log in. Simple enough. Any other cookies are not "table stakes".
Website analytics can be incredibly useful for designers and developers; giving those up would be a huge hit to a lot of companies, large and small, so it's understandable that they're not going to do so. Random example from more than a decade ago: I worked at an online retailer, and we did a nice redesign of our cart page. Looked great, much more readable, but we started losing sales. Did people hate the redesign? I…
[deleted]
Re: Sigh, this is what browsing the web in the EU looks like nowadays (2021)
#114We have been able to happily side-step this entire conversation in our new web properties.
We literally use zero cookies (local storage, et. al.) in our latest products. The user's state is entirely managed on the server, and we pass their session identifier forward through hidden form fields or URL query parameter as appropriate. The only way this works is to go all-in on SSR-style web applications. 100% of user interactions must be satisfied with boring-ass form get/post. The microsecond you start thinking about SPA or holding onto even the merest of boolean facts between page loads, the whole magic experience vanishes in an instant. That isn't to say you can't use javascript, but you certainly don't start with it.
Our initial reasoning for going to this extent was due to weird behavior around cookie lifetime we were seeing on iOS/safari devices as of iOS13. If you don't use any client-side state, other than what is loaded into the current window/document/URL, who could ever ruin your day? They'd literally have to cripple 100% of the internet to start causing trouble for our newest approach. Over time, it became obvious this style also provides a better user & development experience. For instance, I no longer have to put the Apple WWDC event on my work calendar in anticipation of a refactoring effort. Pending legislation is also something I do not worry about anymore.
I find it interesting that the most compliant web experience is also the easiest (aka most boring) to develop and also usually provides the best end user experience. To me, cookie banners ultimately seem to be a higher order consequence of splitting the product into front-end/back-end and farming out every possible consideration to a 3rd party.
Re: Sigh, this is what browsing the web in the EU looks like nowadays (2021)
#115Earlier quoted context omitted.
Is there anyone who actually consents for any other reason than the consent button being either to click than more options? Would we accept this kind of behavioural tracking in real life? Of course not. Just ban tracking for advertising purposes entirely, or at the last least mandate that sites respect the do not track header and require browser manufacturers implement it as opt-in. The cookie pop-up is a dumb law.
>Is there anyone who actually consents for any other reason than the consent button being either to click than more options? If the "reject all" button isn't as easy to click as the "accept all" button, then the popup is illegal. The big players have all been forced into compliance, but there's a long tail of publishers who are chancing their arm on the assumption that the regulators don't have the resources to deal…
> If the "reject all" button isn't as easy to click as the "accept all" button, then the popup is illegal
You should watch the video in the linked article. The options are accept all and "customize". I'd be willing to bet a lot of money that accepting is one click and rejecting is more than one
Re: Sigh, this is what browsing the web in the EU looks like nowadays (2021)
#116Earlier quoted context omitted.
> even people that don't want to be tracked choose the easy "accept everything" button The design of these consent forms is often so obscure I end up in some menu system with too much information I didn't want, and no hotkeys to go back except leave the website.
Nearly every single cookie pop up I have seen is provided by the exact same third party company. That cookie dialog has an option where you can have a simple "Reject all" button that you can click to reject all "not necessary" cookies and use the website. It is the website owners fault when they choose not to turn that feature on.
That shouldn't be a "feature" that you can turn on and off; according to the EU regulations, the option must be equally prominent so there should always be a "reject all" button, and it can't be buried or made harder to see than the "accept all" button.
(Leaving aside that sites should just not have these banners, which provides the best user experience. Just delete all the tracking and the banners along with it.)
Re: Sigh, this is what browsing the web in the EU looks like nowadays (2021)
#117Disclaimer: I actually click through the "do not consent" procedure, which tells a lot about what I'm about to say. When the EU regulation came up, I was shocked that a single article was being shared with 100+ "partners". I knew it was bad, but I didn't know it was that bad. At least now I get the choice to opt-out. Sidenote: Google got fined for that pop-up because it should have a "do not accept" option [1]. Compa…
I like sharing this link[1] when folks ask how bad tracking can be.
A simple page request results in almost a thousand requests being made to third parties, just to show you some bad ads.
[1] https://pagexray.fouanalytics.com/q/pathofexile.fandom.com?f...
Re: Sigh, this is what browsing the web in the EU looks like nowadays (2021)
#118People are fucking babies. They're lobbying for deceptive marketing tactics to avoid the fraction of a second that it takes once in order to agree to be subjected to deceptive marketing tactics (although they have to disable their plugins and ad blockers to complain about it.) I couldn't even understand what I was supposed to see; people in the US also get cookie popups the first time they go to a site that is gathering a dossier about them.
Oh, the suffering of having to click "OK."
Re: Sigh, this is what browsing the web in the EU looks like nowadays (2021)
#119And think, if website operators chose to actually use the DoNotTrack signal from your browser, you wouldn't have such a terrible experience on their websites.
I wonder if they could skip the pop-up if do-not-track is set to "0" (explicit consent).
Unlike do-not-track to 1, as far as I know, it is never set to 0 by default. So it should represent actual consent.
Not the best for privacy, but at least, it would make the web less annoying.
Re: Sigh, this is what browsing the web in the EU looks like nowadays (2021)
#120Earlier quoted context omitted.
Website analytics can be incredibly useful for designers and developers; giving those up would be a huge hit to a lot of companies, large and small, so it's understandable that they're not going to do so. Random example from more than a decade ago: I worked at an online retailer, and we did a nice redesign of our cart page. Looked great, much more readable, but we started losing sales. Did people hate the redesign? I…
Analytics can be useful! They're not 'table stakes' though. The website will continue to work without them. If you want analytics, just get consent for be tracked.
Doesn't HTTP has an header [0] for this? The user can opt easily in and out. I've just read the specs and find that it's being deprecated. Why? It may not be granular, but I believe anyone opting out of telemetry also does not want marketing tracking.
[0]: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/DN...