Live data from Hacker News

No Cookie for You

github.blog

481–490 of 634 posts

Re: No Cookie for You

#481
> At GitHub, we want to protect developer privacy, and we find cookie banners quite irritating, so we decided to look for a solution. After a brief search, we found one: just don’t use any non-essential cookies. Pretty simple, really.

Now if that realization just would dawn on other websites as well...

Re: No Cookie for You

#482
post #481

> At GitHub, we want to protect developer privacy, and we find cookie banners quite irritating, so we decided to look for a solution. After a brief search, we found one: just don’t use any non-essential cookies. Pretty simple, really. Now if that realization just would dawn on other websites as well...

If you wanna make that change you've gotta be running the marketing department.

Re: No Cookie for You

#483
post #438

Earlier quoted context omitted.

Some identifier tied to a time and "place" (service)?

To do what exactly?

Learn at what moment your defenses are down so that they can sell you stuff, presumably. Isn't that the general assumption about tracking?

Or sell your data to interested parties. Maybe if you liked certain GitHub repos, you are more likely to vote Democrat or whatever.

Re: No Cookie for You

#484

Teams has so many bugs and crashes, I'm flabbergasted how Microsoft can deliver something like that. Especially given that they have shown that they are capable of delivering a good experience based on the Electron platform with VSCode. My only explanation would be that it was cobbled together by interns, never meant for public release, then some project manager discovered it and said "Ship it!".

Are you using it on OS X? Runs fine on Windows for me and haven't heard any complaints from any of my coworkers. Everyone says it's better than WebEx.

Runs fine on OSX for me as well. No issues, pretty clear audio. Happy in general.

Re: No Cookie for You

#485
post #305

Earlier quoted context omitted.

good that at least in one country they do something, but everywhere else it's wild wild web and the bandits are not threatened.

I typed "UK data watchdog" (for I did not know its name) and while it is true that I needed more clicks than for France, I found their enforcement page with their list of fines [0]: £18m here, £2m there... [0] https://ico.org.uk/action-weve-taken/enforcement/?facet_type...

It's not actually doing it's job, it only goes after certain types of easy targets:

https://www.openrightsgroup.org/blog/parliament-must-hold-th...

They also had a massive budget shortfall which meant they sent out what amounted to a protection racket letters demanding £40 per year from every UK business, even though almost none of those businesses should be paying it.

All this while simultaneously investigating the ad industry, finding it is egregiously breaking the law, but then doing nothing about it.

The UK's ICO is taking an extremely broad definition of who should be paying it, but an extremely narrow definition of who it should enforce against.

I might add that the £40 it is demanding is almost 3 times the normal £15 yearly fee for running a business in the UK.

Re: No Cookie for You

#486
post #446

Earlier quoted context omitted.

Does anyone happen to know of a service like this that is free (not self hosted) for non-commercial, low-traffic sites? Or which costs less than ~$10 per year. I have a basic Github Pages site, and I currently don't know whether anyone is looking at it, beyond the very few who take the time to email me. I don't need (or want) to know anything about my visitors, but it would be nice to know that I'm not simply tossing…

> Does anyone happen to know of a service like this that is free (not self hosted) for non-commercial, low-traffic sites? Panelbear is privacy-friendly, and has a free plan with 5,000 page views per month. Commercial use is allowed. https://panelbear.com Full-disclosure: I’m running this service. Feel free to ask me anything :)

Exactly what I was looking for. Thank you.

Re: No Cookie for You

#487

Earlier quoted context omitted.

Does anyone happen to know of a service like this that is free (not self hosted) for non-commercial, low-traffic sites? Or which costs less than ~$10 per year. I have a basic Github Pages site, and I currently don't know whether anyone is looking at it, beyond the very few who take the time to email me. I don't need (or want) to know anything about my visitors, but it would be nice to know that I'm not simply tossing…

Netlify Analytics is $9/mo

My approximate budget was $10 per year, not month! :)

Re: No Cookie for You

#488

Earlier quoted context omitted.

GitHub still sends the same personal data to their own analytics endpoint, and the privacy policy which lists third-party data subprocessors [1] has not been updated. See my comment below for details: https://news.ycombinator.com/item?id=25458635 Tracking cookies have little value for GitHub when they can collect data about users that have already been authenticated, and they send the username and user ID as part of…

> Tracking cookies have little value for GitHub when they can collect data about users that have already been authenticated This is true to every advertiser or data seller, Including obvious ones like Google, FB, Amazon... and less obvious ones like your ISP, Apple, etc. The industry call it persistent ID (as opposed to cookie, which are transient ID): https://digiday.com/marketing/wtf-persistent-id/ (random result,…

History, ZIP and DNA already are personally identifiable information (PII). Pseudonymisation is in general not enough to avoid the GDPR and similar laws. And pseudonymisation would require the removal or obfuscation of all PII to the point that it is impossible to reconstruct the identity of the user.

There's no specific list of information regarded as PII, it's PII if it can be used to identify the user, even if only in combination of the other PII.

The GDPR is really quite broad there, other laws may be more lenient. However, the GDPR is not yet very strictly enforced or tested in court.

Re: No Cookie for You

#489
post #308
post #258

Earlier quoted context omitted.

> not self hosted you'll need a cookie banner then

Not necessarily. Only if personal data is collected by the third party.

I thought that with the recent changes to PECR they that clarified any non-essential cookie-like technology needs permission, irrespective of whether it's first party or pseudonymous. And additionally that analytics does not count as strictly necessary.

That seems to be the advice of the UK ICO: https://ico.org.uk/for-organisations/guide-to-pecr/cookies-a...

Re: No Cookie for You

#490
post #3

A lot of people have the misconception that the EU cookie law applies to all cookies, but as the blog post correctly points out, that just isn't the case.

Well, it's a reasonable misconception to have, banners don't usually explain everything, they mostly say "hey, we use cookies", and not "hey, we use non-essential cookies".
Post reply on HN