Live data from Hacker News

I don't care about cookies

i-dont-care-about-cookies.eu

51–60 of 193 posts

Re: I don't care about cookies

#51
I suppose I'll add this to the growing constellation of add-ons considered essential just to even get around the web without annoying, managerially-imposed dark patterns interrupting my workflow.

Re: I don't care about cookies

#52
post #7

The consent popups you see aren't just about cookies though. They want (and sometimes illegally force) you to consent to processing of your personal information for reasons beyond just providing you with a service (or more commonly just reading an article). Cookies might be one technical means to assist with that, but it's not the only means.

Well consumer irritation with these popups is causing more and more sites to consider trackingless ads now. It's a hot topic in the EU.

I agree this is the wrong way to go about the issue but it does seem to have some positive effects as well.

Re: I don't care about cookies

#53
post #7

The consent popups you see aren't just about cookies though. They want (and sometimes illegally force) you to consent to processing of your personal information for reasons beyond just providing you with a service (or more commonly just reading an article). Cookies might be one technical means to assist with that, but it's not the only means.

This creates an interesting situation if your browser addin auto-squashes those dialogs. I doubt any court of law would rule you gave consent to a dialog that was never displayed to you. (Of course if their terms are posted somewhere else on their website they might have you there).

It is stated that you habe to activly give consent e.g. click an unchecked box or a button. Just using the website after seeing a warning or a pop-up is not active in the courts opinion

Re: I don't care about cookies

#54

Earlier quoted context omitted.

Some sites use localstorage instead of cookies for session tracking.

Thank you. According to a quick search [1], """ Cookies and local storage serve different purposes. Cookies are primarily for reading server-side, local storage can only be read by the client-side. So the question is, in your app, who needs this data — the client or the server? If it's your client (your JavaScript), then by all means switch. You're wasting bandwidth by sending all the data in each HTTP header. If it'…

Client side apps will be caught as well. Putting a JWT in a HttpOnly cookie is a common pattern. In fact, many people recommend this approach over localStorage for security reasons.

Re: I don't care about cookies

#55
Honestly, I think it is our job as the creators/hackers to come up with a better solution. The problem is very real, and needs to be fixed. But no good solution has ever been created by lawyers. Ever. So here we are, left with a forest of cookie warnings that perfectly break the internet.

So here is a proposal:

What if a user could declare her/his consent settings _before_ opening the website? There would no longer be a need for consent dialogues, right?

One way to achieve that would be to take an example from the UTM parameters. A browser/User could just use ?utm_consent=all, ?utm_consent=minimal, and ?utm_consent=deny to indicate the level of consent. Browsers could offer it as a standard setting and automatically amend it to any URL. Websites could just drop the consent dialogue whenever that UTM is set.

Re: I don't care about cookies

#56
post #7

The consent popups you see aren't just about cookies though. They want (and sometimes illegally force) you to consent to processing of your personal information for reasons beyond just providing you with a service (or more commonly just reading an article). Cookies might be one technical means to assist with that, but it's not the only means.

Any good examples of these terms. I would like to read through them. I see very few of these pop-ups because I rarely use a graphical browser, and if I do, Javascript is disabled unless necessary. It does seem like the GDPR is being exploited to manipulate how users consent in a way that benefits the website's online ad scheme more than the user's experience. If I were drafting a GDPR, I would standardise the consent…

The standardized popup is not in the gdpr but it is stated, that you have to make the privacy friendlies setting your default. If the user just clicks ok this should lead to no tracking at all.

https://gdpr-info.eu/art-25-gdpr/

Re: I don't care about cookies

#57
post #36
post #7

The consent popups you see aren't just about cookies though. They want (and sometimes illegally force) you to consent to processing of your personal information for reasons beyond just providing you with a service (or more commonly just reading an article). Cookies might be one technical means to assist with that, but it's not the only means.

> The consent popups you see aren't just about cookies though. I don't care about all the other stuff the popups are about either. The popups are pointless, click-through damage and they serve no purpose. The laws that caused them to exist are equally pointless. There is no measurable benefit to any of this privacy theater and no less tracking is occurring since the advent of all of these pointless popups.

Have you tried going through these new popups? If they are trustworthy then the current ones allow you to disable some cookies and give you an idea of who is doing the tracking. Even though there are far better ways to manage cookies with browser settings and extensions: the options are sometimes quite limited (e.g. Chrome on Android) and many people would simply be unaware of cookies without these popups. Those people use browsers with little understanding of what's happening under the hood and have no interest in exploring technology so disclosure is one of the few ways to inform them.

As for privacy theatre, there are two reasons why these popups are pointless. First, it was too little and too late. If the regulations came in before tracking became pervasive, it could have been effective since people would have had the option to find similar content. Second, far too few people feel entitled and click through without really considering whether it is worth the price.

Re: I don't care about cookies

#58
post #53

Earlier quoted context omitted.

This creates an interesting situation if your browser addin auto-squashes those dialogs. I doubt any court of law would rule you gave consent to a dialog that was never displayed to you. (Of course if their terms are posted somewhere else on their website they might have you there).

It is stated that you habe to activly give consent e.g. click an unchecked box or a button. Just using the website after seeing a warning or a pop-up is not active in the courts opinion

Actually, enforceability of such terms varies by jurisdiction and other factors. Search on clickwrap, clickthrough, etc.

Re: I don't care about cookies

#59

Honestly, I think it is our job as the creators/hackers to come up with a better solution. The problem is very real, and needs to be fixed. But no good solution has ever been created by lawyers. Ever. So here we are, left with a forest of cookie warnings that perfectly break the internet. So here is a proposal: What if a user could declare her/his consent settings _before_ opening the website? There would no longer b…

And the do-not-track header was created, and promptly ignored and used as a form of fingerprinting, due to an absence of legal backing.

Re: I don't care about cookies

#60

Earlier quoted context omitted.

OKAY apparently the "freedom" brigade is here. Do you know what the FUCK force means? Is someone being held captive and their digit or voice being manipulated by whatever service? You are not FORCED to visit a fucking website. Jesus fucking christ.

OKAY, the freedom brigade apparently believes they ARE forced to visit websites. Welp, sorry you are enslaved to Bloomberg.com or whatever. I'll help rescue you, just send some alert so I know where to look.

Please stop.
Post reply on HN