Live data from Hacker News

Google's widespread tracking across the web

simpleanalytics.com

71–80 of 108 posts

Re: Google's widespread tracking across the web

#71
post #31

> Even in countries with strict laws like the GDPR, Google's trackers are still everywhere. That raises questions about how effective these regulations really are in practice. This is basically it. GDPR is a stupid unenforceable law, and should be wiped from the books. Try again with something new.

It took a while, but is starting to work. Many "cookie banners" have finally started to work in the EU. Once you deny PII processing many sites don't load GA etc... The time of malicious compliance is starting to pass. Some sites have figured it out and realized they really don't need personalized analytics and have replaced implementations with privacy respecting ones(ex, plausible). This lets them remove the dark-p…

Enforcing sites not calling out to third party data processors via client-side JavaScript is detectable and enforceable, but taking such actions server-side is undetectable (and therefore unenforceable).

Re: Google's widespread tracking across the web

#72
post #62

Earlier quoted context omitted.

Ha, nice find! I'm the Adriaan in adriaan.com. I'm testing some new script features that might improve deliverability. It's not sending any personal data. I use another domain to have the least effect of ad-blockers.

> Ha, nice find! I'm the Adriaan in adriaan.com. I'm testing some new script features that might improve deliverability. It's not sending any personal data. I use another domain to have the least effect of ad-blockers. You are sending the user agent, path, referrer, a session id + the IP (which is automatically sent) to your personal server and also using a different domain to track users who have ad blockers install…

Nice reminder to disable javascript or just use Tor Browser to open any links you don't want associated with your public presence

Re: Google's widespread tracking across the web

#73
post #59
post #56

A lot of browser's have tracking blocked and there will be a icon in the top bar which will show this. And many vpns also offer an option to block trackers and ads before they get to you.

VPN providers can't meaningfully block trackers. If they say they do, they have to be intercepting SSL which requires extra work (must install their generated CA on all clients) and you are literally handing over all data to the VPN provider, more so than without of course, as they'd be able to decrypt HTTPS payloads.

Wouldn't they just be blocking the DNS queries?

So any client side requests to a known URL is just blocked. So only server side would work.

Re: Google's widespread tracking across the web

#75

Earlier quoted context omitted.

It isn't, parent is making stuff up. Browsers do not offer an interface that is exposing that information. And remote servers are outside of your local network and thus cannot see these values, either.

That's true for browsers, but Google controls both the Android OS and Google Play Services, giving them access to hardware identifiers on Android smartphones. Given the broad adoption of Android devices and the potential to correlate data, this is not a case of "making stuff up." Even if your MAC address is spoofed/randomized, the remaining data points are still sufficient to track you.

Doesn't make sense to track and correlate the mutable MAC address when you have access to the burnt-in device serial number and IMEI.

Re: Google's widespread tracking across the web

#77

Earlier quoted context omitted.

Ha, nice find! I'm the Adriaan in adriaan.com. I'm testing some new script features that might improve deliverability. It's not sending any personal data. I use another domain to have the least effect of ad-blockers.

Nice to meet you, Adriaan. This is slightly incorrect. By sending a request from your business website (SimpleAnalytics) to your personal domain (Adriaan), you actually transfer personal data. In this case, it’s the IP address, which according to GDPR is considered PII. Taking into account the scope of privacy terms provided on your business website, it doesn’t include data sharing with your personal entity through y…

PII is not GDPR term. PII is used some US-specific acts, like HIPPA.

Did you mean Personal Data?

Re: Google's widespread tracking across the web

#78

Earlier quoted context omitted.

Nice to meet you, Adriaan. This is slightly incorrect. By sending a request from your business website (SimpleAnalytics) to your personal domain (Adriaan), you actually transfer personal data. In this case, it’s the IP address, which according to GDPR is considered PII. Taking into account the scope of privacy terms provided on your business website, it doesn’t include data sharing with your personal entity through y…

PII is not GDPR term. PII is used some US-specific acts, like HIPPA. Did you mean Personal Data?

Yes, I had use PII as synonymous of Personal data here.

https://en.wikipedia.org/wiki/Personal_data

Re: Google's widespread tracking across the web

#79
post #57
post #24

User tracking only exists because it generates money. We should ban the entire practice. No more targeted ads (with very little exceptions).

Then something else will replace it. To make the same amount of money.

You mean old timey wimey marketing pre-internet? Just target people instead of Bob at 17th Rosewood St.

How about this, I set a preference for some stuff I am interested in and that’s what they can show me.

Re: Google's widespread tracking across the web

#80

Earlier quoted context omitted.

PII is not GDPR term. PII is used some US-specific acts, like HIPPA. Did you mean Personal Data?

Yes, I had use PII as synonymous of Personal data here. https://en.wikipedia.org/wiki/Personal_data

It is very close, but it not the same.

https://techgdpr.com/blog/difference-between-pii-and-persona...

> When organisations seek to protect their user’s data, it is necessary that they understand the data they need to safeguard. Personal data, in the context of GDPR, covers a much wider range of information than personally identifiable information (PII), commonly used in North America. In other words, while all PII is considered personal data, not all personal data is PII.

When you say PII in context of GDPR you are simply using wrong term.

Post reply on HN