311–320 of 543 posts
With notification spam fixed, how about tackling cookie banners spam next? Let's work on a standard to allow user to set their preferred cookie settings level once in browser UI and keep websites clean.
Earlier quoted context omitted.
Have you found Bing more desirable than DuckDuckGo for a specific reason? (Uses DuckDuckGo and liberal use of the bangs when things don't come up as expected)
I've used Yahoo since the early 2000s and never hopped on the Google bandwagon. The times Ive tried to find things in Google because "people say it has better search", I've not had much luck. Possibly because they don't have extensive data on me and my search preferences? I think Yahoo is backed by Bing these days? I always find its search results perfectly adequate.
Earlier quoted context omitted.
GPU != video acceleration. The question is about whether FF is finally using va-api to accelerate video codec decoding.
Oh dear. Video acceleration means GPU is doing what CPU would be else doing. Which means user threads get less indirect access to GPU. Which is a potential security risk, because GPUs and GL are designed to perform, not to secure data. VA-API is not mentioned in the question at all. It is the most common api for video acceleration, but there are others - direct vdpau, or nvdec.
With notification spam fixed, how about tackling cookie banners spam next? Let's work on a standard to allow user to set their preferred cookie settings level once in browser UI and keep websites clean.
How would you detect if something is a cookie dialog in a standardized way? It's pretty much impossible as all of them are custom code with different layouts / selectors / sequence of actions you need to take to opt out.
Earlier quoted context omitted.
Unfortunately, they are required by law (at least in Europe) and we can't do much about it. You can't say use a browser API to set a global setting for them, because GDPR explicitly requires that every website must get the user consent for them. Of course the real solution (and the reason why GDPR introduced the banner) is for website to stop using cookies for tracking their users and thus have no reason to put the b…
> You can't say use a browser API to set a global setting for them, because GDPR explicitly requires that every website must get the user consent for them. I can see why that prevents a browser from auto-accepting all cookies, but how in the world does this logic apply to me if I want to deny consent to 100% of the websites to use cookies? Set the default on the browser to deny all consent, and show the cookie notifi…
As a personal confession I cannot sympathize for this animosity towards banners. Apps usually have a worse onboarding experience than websites.
My only considerations of GDPR notices is to note how many of them manage to be uncompliant and wonder if archiving services can bypass them.
With notification spam fixed, how about tackling cookie banners spam next? Let's work on a standard to allow user to set their preferred cookie settings level once in browser UI and keep websites clean.
Bring back P3P, with GDPR acting as the enforcement part (which was quite lacking when P3P was first proposed)? Might work quite nicely, and the support is in browsers already, it just tends to be ignored.
With notification spam fixed, how about tackling cookie banners spam next? Let's work on a standard to allow user to set their preferred cookie settings level once in browser UI and keep websites clean.
Unfortunately, they are required by law (at least in Europe) and we can't do much about it. You can't say use a browser API to set a global setting for them, because GDPR explicitly requires that every website must get the user consent for them. Of course the real solution (and the reason why GDPR introduced the banner) is for website to stop using cookies for tracking their users and thus have no reason to put the b…
Earlier quoted context omitted.
Regarding the native key store, why not just use full disk encryption? The session-specific encryption never made much sense to me, unless you share the computer with others. How many processes do you really have that are not running under your user or root?
I do use full disk encryption, but when I'm logged in, any program that runs as me can access my files (subject to some partial restrictions that Apple introduced a while ago). And anyone gaining access to my unlocked computer can easily copy that password file. You could say once malware is executed with my credentials it's game over anyway. But I disagree with that. Having a file full of passwords stolen is far wor…
On Windows, the same is true of the encrypted data; any program that runs as you can decrypt it. Is it different on macOS? How does the system authenticate a specific program?
With notification spam fixed, how about tackling cookie banners spam next? Let's work on a standard to allow user to set their preferred cookie settings level once in browser UI and keep websites clean.
Wish I had bookmarked the page.
I find the notification permission change (requiring it to be after a user gesture) really annoying. It doesn't do almost anything to combat permission spam (if you're visiting a clickbait site, you'll probably click or scroll at least once, especially on mobile where sites usually have a giant header so you need to scroll past the fold to even see that the article is clickbait), and just inconveniences developers wh…