Finally, I've been saying this for years, glad to hear that people are finally acting on this. Great news.
No Cookie for You
361–370 of 634 posts
Re: No Cookie for You
#362Earlier quoted context omitted.
Doesn't that depend on the size of the salt?
To an extent, but there are easy ways to cut the search space. For example, you could make a unique request with garbage on it from a known IP every day, and then all you have to do is build a rainbow table for that one IP to find out what the salt is for each day, and then you can fully reconstruct the logs.
@mattlondon: The salt is known to plausible, that is the only way someone can hash it.
Re: No Cookie for You
#363This is fantastic. Thank you, GitHub. I hope this is a good demonstration of a hands-off approach at Microsoft in regard to company culture. I realize you likely still collect some analytics for yourself and that this change does nothing to alleviate that. EG, first party javascript. But it's great that it's divorced from 3rd parties. Presumably Microsoft has access to those metrics, though? I wonder how deeply that…
Good job, can more companies follow the lead now? Btw when I see that banner - I always reject the option and still have not experienced any bad experience from website.
Re: No Cookie for You
#364Unless this is accompanied by actual technical detail, it sounds like they just re-labelled all cookies as "essential" and called it a day.
Re: No Cookie for You
#365I really don't care about cookies when visiting any website, I have a residential IP address tracking me using this is pretty much equivalent to having a cookie, yet I'm forced to accept a cookie which has near zero effect on my privacy all the while not being under the jurisdiction of EU laws regardless. This is part of the web, when creating legislation that attempts to block/censor or circumvent technology that is…
No EU lawmaker has ever said GDPR will be enforced worldwide. It's Github's and other sites' own choice to enforce it worldwide. They could also build two seperate websites. The fact that this laws' reach is almost global is something called the Brussels Effect: https://en.wikipedia.org/wiki/Brussels_effect But there is also the other way: simply not show a website in Europe at all. I see this sometimes when I click…
> No EU lawmaker has ever said GDPR will be enforced worldwide
It literally takes 3 seconds to analyze the game theoretical effect of such a law to recognize its reach is well beyond Europe and therefore also clearly understood it to be such when passed.
Re: No Cookie for You
#366Earlier quoted context omitted.
Not necessarily. Only if personal data is collected by the third party.
To be fair, most of them probably do. It's not like the introduction of GDPR in Europe 2 years ago suddenly made all of the shit a marketing dept shoves into Google Tag Manager completely legit and above board. These third parties will take what you give them and _also_ take what they can get from your browser if you're embedding their script. Are you going to proxy those scripts as well to stop them getting the user…
It really shits me that a lot of them you can't even deny it. They just have a button like "I understand".
WTF is that...
Re: No Cookie for You
#367I hate the standard wording on Cookie banners. Most of them should read: "The site uses cookies. Actually it doesn't - you are not logged on and we don't need to maintain state. But our advertising partners, their partners, and their partner's partners all love to set tracking cookies. Click here to consent to three dozen cookies from around the globe."
Good lord, everyone needs banners and popups? Why not just let browsers controls who sets what cookies? I'm tired the endless cookie popups, can we come up with an "allow cookies if the browser accepts them" standard as long as that guarantees no cookie popups? Then browser vendors can ship a delete all non same origin cookies on tab close or something.
> Why not just let browsers controls who sets what cookies?
This is actually the case, what do you mean? All browsers that I know of (firefox, chrome, elinks) allow the user to control what to do with cookies.
Re: No Cookie for You
#368Earlier quoted context omitted.
Few years back I created some HelloWorld application on Google's AppEngine (requires Java, Python or Go) and was positively surprised about its statistics on theirs dashboard.
I was also surprised but the number of different dumb bots that had tried to brute-force our app engine site on /wp-login.php and it wasn't even running on wordpress
I get requests to /wp-login.php (and the like) on my simple Haskell web app hosted on my university's servers. They're quite persistent and I'm not even sure how found the URL to my app in the first place (the format is something like universityname.com/~userid/projectname, and I haven't linked it anywhere).
Re: No Cookie for You
#369Earlier quoted context omitted.
Are we claiming that if GitHub has a dashboard like “number of concurrent sessions” and “average length of session” and “unique users who touched this feature” it would be a GDPR violation? Because I can’t imagine that they don’t.
I don’t think this is a problem for GDPR. As long as there’s no personal data involved you can count active sessions, aggregate data etc
How would you count unique users without processing any records corresponding to particular users?
Re: No Cookie for You
#370Sorry, but why is GitHub’s blog on HN 3 times today?