Live data from Hacker News

Cookie Warning Shenanigans Have Got to Stop

troyhunt.com

281–290 of 509 posts

Re: Cookie Warning Shenanigans Have Got to Stop

#282
post #213

Earlier quoted context omitted.

Why? It's relatively common for governments to prohibit businesses and services from discriminating against certain types of users, why do you think it's ridiculous in this specific case?

Whether we like it or not, tracking data used for ads is the currency of the free internet. It is how things are paid for. This is like a government saying to a restaurant "You can't discriminate against people who don't want to pay you money for the food. You can ask them if they are willing to give you money for the sandwich, but if they say no, you still have to give them the sandwich"

"the government" as in >we the people< says to all the restaurants (and groceries): this stripping of all of our clothes before entering is nonsense and we can't choose not to eat, so we will force you.

Re: Cookie Warning Shenanigans Have Got to Stop

#283

Earlier quoted context omitted.

Hmm, there are features that one literally can't provide without state (cookies). I think the real problem here is that the technical feature of cookies providing browser state is a poor proxy for what EU/DPA _really_ wants to regulate, which is privacy-related tracking. There are tons of sites I've written which use cookies, but have no ads and perform no user-tracking whatsoever, not even Google Analytics. It is tr…

> Hmm, there are features that one literally can't provide without state (cookies). The biggest lie in most cookie warning popups is that you need to accept them for the site to function. It is often not true. Those are session cookies and you don't need to warn users about them, they're just allowed. I didn't know this, and neither do any of the cookie warnings mention this. So like many people I thought the cookie…

I went through a similar thing which resulted in me removing cookie warnings from all but one of the websites I manage, yet I still believe that the law is stupid. It's like outlawing guns to solve your murder problem without considering all the other murder weapons all while keeping the act of murder itself legal.

As far as I understand it, the GDPR does everything and more than the cookie law was supposed to, so IMO it's about time we put that disaster behind us.

Re: Cookie Warning Shenanigans Have Got to Stop

#284

Earlier quoted context omitted.

Hmm, there are features that one literally can't provide without state (cookies). I think the real problem here is that the technical feature of cookies providing browser state is a poor proxy for what EU/DPA _really_ wants to regulate, which is privacy-related tracking. There are tons of sites I've written which use cookies, but have no ads and perform no user-tracking whatsoever, not even Google Analytics. It is tr…

> Hmm, there are features that one literally can't provide without state (cookies). The biggest lie in most cookie warning popups is that you need to accept them for the site to function. It is often not true. Those are session cookies and you don't need to warn users about them, they're just allowed. I didn't know this, and neither do any of the cookie warnings mention this. So like many people I thought the cookie…

That's not quite right.

On the web, your approximate unique ID is your browser fingerprint. That can be used to join your activity to other activity. Your session cookie is your activity for your browsing session (or for users who never quit their browser, your entire computer uptime).

Think about it -- a cookie is information the web server gives to you; it's essentially a bookmark to your current position in the app. The server already knows where you were -- it saw you there!; it just doesn't know that you want to go back there on your next HTTP request.

Tracking data is data you give to the web server. Cookies are only one primitive to enable tracking. Cookies can be replicated by URL query parameters, subject to size constraints.

Re: Cookie Warning Shenanigans Have Got to Stop

#287
post #200
post #197

Earlier quoted context omitted.

Back in the early days, browsers used to prompt you for every cookie: https://i.imgur.com/FThIFHe.png

i don't think i ever saw that. which browser?

It was pretty common! Check out this Onion parody (from 2002), which refers to a website prompting you to accept cookies:

>"She goes apeshit whenever a pop-up window comes up. And one time, she paged me because she got a message about accepting cookies. She was all freaked out because now she thought she was being charged for actual cookies."

https://local.theonion.com/getting-mom-onto-internet-a-sisyp...

Re: Cookie Warning Shenanigans Have Got to Stop

#289
post #213

Earlier quoted context omitted.

Why? It's relatively common for governments to prohibit businesses and services from discriminating against certain types of users, why do you think it's ridiculous in this specific case?

Whether we like it or not, tracking data used for ads is the currency of the free internet. It is how things are paid for. This is like a government saying to a restaurant "You can't discriminate against people who don't want to pay you money for the food. You can ask them if they are willing to give you money for the sandwich, but if they say no, you still have to give them the sandwich"

Tracking is not necessary to make money online. It’s just helpful.

It’s more like the government saying, you can’t discriminate against people who demand that their food is cooked in a kitchen that isn’t filled with cockroaches. It’s going to hurt the bottom line, and might kill some businesses, but it doesn’t reduce to a prohibition on making money.

Re: Cookie Warning Shenanigans Have Got to Stop

#290
post #238

Earlier quoted context omitted.

Hmm, there are features that one literally can't provide without state (cookies). I think the real problem here is that the technical feature of cookies providing browser state is a poor proxy for what EU/DPA _really_ wants to regulate, which is privacy-related tracking. There are tons of sites I've written which use cookies, but have no ads and perform no user-tracking whatsoever, not even Google Analytics. It is tr…

I'm not totally sure what you are arguing, but if you don't use the cookies for tracking, then you don't need to warn or inform the user. And if you use some other kind of tracking beside cookies, you still need to warn.

Yes, there is a lot of nonsense talked about this. The GDPR makes it clear that sites don’t have to ask for permisssion to place session cookies and other cookies that are essential to the functioning of the site.
Post reply on HN