So, this cookie alert on theverge.com is both refreshingly honest and depressingly disturbing
from vk6flab@lemmy.radio to privacy@lemmy.ml on 14 Aug 2024 05:15
https://lemmy.radio/post/4070252

A cookie notice that seeks permission to share your details with “848 of our partners” and “actively scan device details for identification”.

#privacy

threaded - newest

TheImpressiveX@lemmy.ml on 14 Aug 2024 05:32 next collapse

If trackers are disabled, some content and ads you see may not be as relevant to you.

Oh, the horror! (Not that we’ll be seeing ads anyway.)

TheTechnician27@lemmy.world on 14 Aug 2024 06:41 next collapse

“some content and ads you see may not be as relevant to you” is what we in mathematical logic call a vacuous truth.

tetris11@lemmy.ml on 14 Aug 2024 10:43 collapse

which part is the (false) antecedent, and which part is the statement?

davidagain@lemmy.world on 14 Aug 2024 11:42 collapse

If you’re looking for a never true anticedent reason that “some content and ads you see may not be as relevant to you” is vacuous, that would work if they had an ad browser that was 100% effective on the site in question.

If you’re looking for a never true anticedent for “If trackers are disabled, some content and ads you see may not be as relevant to you.”, it’s that you can’t disable all trackers with a cookie dialog because of the “necessary cookies” blanket exemption, the too many tick boxes to use “legitimate interest” loophole, and that most websites use “fingerprinting”, meaning they reference you not by your cookies but by the worryingly extensive information they get automatically about your browser’s version, settings, capabilities and features, and of course IP address. So it’s never true that trackers are never disabled.

What the Wikipedia article doesn’t explain well in my view, is that logically, “if A then B” means “B or not A” for short, or more explicitly, “in all circumstances, at least one of B, or (not A) , is true”. This is vacuously (emptily) true if B is always true or A is always false, because it’s not genuinely conditional at all.

So I suspect that they meant it was vacuous, not on the grounds that the anticedent could never be true, but that the consequent could never be false. Like “If you give me $10, the sun will rise tomorrow”. In this case, all they need to assert is that “some content and ads you see may not be as relevant to you” is true irrespective of whether trackers are disabled, which is almost certainly what they meant.

I’m curious that the Wikipedia article says the base case in an induction is often vacuously true, but I think they mean trivially true, like cos(1x) + sin(1x) = (cos x + sin x)^1, not vacuously true. I couldn’t think of any induction proofs where the base case was literally vacuous except false ones used for teaching purposes, probably because I could only think of induction proofs of absolute rather than conditional ones. Probably there are mathematical fields where induction is used for conditional statements a lot that I’m forgetting.

tetris11@lemmy.ml on 14 Aug 2024 11:47 collapse

In this case, all they need to assert is that “some content and ads you see may not be as relevant to you” is true irrespective of whether trackers are disabled, which is almost certainly what they meant.

Ah I see. Thanks for the detailed writeup

paraphrand@lemmy.world on 14 Aug 2024 07:06 collapse

Back in the early 2000s, we were promised that the magic of ads online would be that they are always relevant and not terrible anymore. This is why the targeting and tracking was valid to do.

It never happened. Not for a moment.

Quill7513@slrpnk.net on 14 Aug 2024 06:10 next collapse

If the partner count is larger than the number of bananas I can imagine being in a bunch I decline cookies. If I can’t disable performance or targeting cookies I decline cookies. These are my rules

NaibofTabr@infosec.pub on 14 Aug 2024 06:27 next collapse

til I can only imagine 0 bananas in a bunch

Max_P@lemmy.max-p.me on 14 Aug 2024 07:09 next collapse

I switched to cookie allowlist, and manually add the sites I want to remember me. I don’t want to play the cookie game anymore, period. The only reason they ask is because legally they have to, and even then they do the bare minimum and use dark patterns to make it as hard as possible to decline cookies.

No more cookies for anyone, should have used them responsibly in the first place.

Petter1@lemm.ee on 14 Aug 2024 08:44 collapse

😮🤔 gotta do that as well

MonkderVierte@lemmy.ml on 14 Aug 2024 09:36 collapse

I decline cookies.

tetris11@lemmy.ml on 14 Aug 2024 10:44 collapse

I push away the plate and slap the butler

delirious_owl@discuss.online on 14 Aug 2024 06:32 next collapse

That doesn’t include the partners of their partners

devfuuu@lemmy.world on 14 Aug 2024 08:25 collapse

I blame all these polyamorous relationships with barely any rules.

delirious_owl@discuss.online on 14 Aug 2024 06:33 next collapse

Is it really so hard to copy and paste the text? Down voted. Don’t do that again.

Dark_Arc@social.packetloss.gg on 14 Aug 2024 06:38 next collapse

Is it really so hard to copy and paste the text look at the image? Down voted. Don’t do that again.

[deleted] on 14 Aug 2024 06:54 next collapse
.
nick@midwest.social on 14 Aug 2024 06:58 next collapse

There are nicer ways to say this.

tetris11@lemmy.ml on 14 Aug 2024 10:47 collapse

“For the sightly impaired, indeed my good chum! Tis the crux of why we uphold our most sacred vows in the context of textual imagery.”

Dark_Arc@social.packetloss.gg on 14 Aug 2024 07:41 collapse

I’m colorblind for what it’s worth and I don’t go around yelling at people for making badly colored charts I can’t understand in the rudest way possible.

The image captures the web page design / the cookie banner, it’s more than “just the words” so for a non-blind person “just post the text” is actually arguably a downgrade.

DmMacniel@feddit.org on 14 Aug 2024 08:40 next collapse

But you should, since there are accessibility rules against low contrast.

Dark_Arc@social.packetloss.gg on 15 Aug 2024 06:33 collapse

Just because there’s a “rule” that exists somewhere in the abstract, that doesn’t mean folks should assail people for innocent mistakes. It’s also not a rule of this community. It’s not a rule of the instance this community is a part of. It’s most definitely not a rule of “the platform.”

In fact, these the W3C (the body most people are seemingly citing as a source for rules) isn’t even calling their “rules”, rules. They call them “guidelines” www.w3.org/WAI/standards-guidelines/.

Ya, I’m colorblind, but you’re probably not and you probably didn’t think about it. You’re just some random person on the internet, you’ve probably got plenty of other things to worry about than hunting down the latest WC3 publication on accessibility.

To be clear, I do let folks know if there’s a chart I’m interested in reading that I can’t read, try to give feedback about colorblind relevant stuff, etc. (literally last night I was on the Deadlock forums giving Valve accessibility feedback). I just do it in a “matter of the fact” fashion and try to explain what I’m struggling with rather than with an attitude and command that they change something without any context.

apotheotic@beehaw.org on 14 Aug 2024 09:14 collapse

I mean this is literally the purpose of alt text, so that you can share an image and its description (which in this case should contain all the text from the image) and screen readers can do their thing.

Dark_Arc@social.packetloss.gg on 15 Aug 2024 06:18 collapse

I actually didn’t realize their was support for alt-text. The clients I’ve used the few times when I’ve posted images … I don’t recall even prompting for alt text.

apotheotic@beehaw.org on 15 Aug 2024 10:46 collapse

Even without direct support for alt text, you can achieve the same result by posting it all in the post body.

idiomaddict@lemmy.world on 14 Aug 2024 06:57 next collapse

Dictation apps have trouble with text in images, which is tough for people with impaired vision

Dark_Arc@social.packetloss.gg on 14 Aug 2024 07:45 next collapse

That seems like a lemmy limitation that probably needs worked on (i.e. prompting for alt text for images so apps can just read the alt text and folks are reminded to think of it).

EDIT: It’s been brought to my attention that the Lemmy server software actually does support alt-text … but I’m not sure how prevalent this is with clients (I don’t remember ever seeing a prompt for it).

Petter1@lemm.ee on 14 Aug 2024 08:49 collapse

😮so there is really no OCR in those dictation apps 🤯? Is there a OCR API in iOS? If so, it should not be too hard integrating it into an app 🤔 I assume

DmMacniel@feddit.org on 14 Aug 2024 08:39 collapse

is it really so hard to look at the image

Uuuuuuuh… Have you considered that there are people who have problems with their eyes or are outright blind?

Don’t be an ass again.

vk6flab@lemmy.radio on 14 Aug 2024 06:57 next collapse

Privacy Notice

We and our 848 partners store and access personal data, like browsing data or unique identifiers, on your device. Selecting “I Accept” enables tracking technologies to support the purposes shown under “we and our partners process data to provide,” whereas selecting “Reject All” or withdrawing your consent will disable them. If trackers are disabled, some content and ads you see may not be as relevant to you. You can resurface this menu to change your choices or withdraw consent at any time by clicking the [“privacy preferences”] link on the bottom of the webpage [or the floating icon on the bottom-left of the webpage, if applicable]. Your choices will have effect within our Website. For more details, refer to our Privacy Policy. Cookie Policy. Ways we may use your data:

Actively scan device characteristics for identification. Use precise geolocation data. Develop and improve services. Create profiles to personalise content. Measure advertising performance. Use limited data to select advertising. Use limited data to select content. Use profiles to select personalised content. Create profiles for personalised advertising. Measure content performance. Use profiles to select personalised advertising. Understand audiences through statistics or combinations of data from different sources. Store and/or access information on a device.

List of Partners (vendors)

booty@hexbear.net on 14 Aug 2024 08:29 next collapse

<img alt="downbear" src="https://hexbear.net/pictrs/image/2ecd0805-fe83-4761-9771-8844f0e83a78.png">

[deleted] on 14 Aug 2024 14:42 collapse
.
[deleted] on 14 Aug 2024 15:18 collapse
.
Petter1@lemm.ee on 14 Aug 2024 08:46 collapse

You don’t have OCR in your eyes 😮? Or do you use a screen reader, there must be screen readers that can OCR, tho, or are there none?

delirious_owl@discuss.online on 14 Aug 2024 15:03 collapse

Accessibility standards require us to not put text in images. Its not hard to copy and paste the text.

doodledup@lemmy.world on 14 Aug 2024 16:05 collapse

What standards?

delirious_owl@discuss.online on 14 Aug 2024 17:01 collapse

W3C is the big one that I know

But surely there’s others as well

buh@hexbear.net on 14 Aug 2024 06:39 next collapse

World’s nosiest polycule

ech@lemm.ee on 14 Aug 2024 09:23 collapse

They like to watch.

Dark_Arc@social.packetloss.gg on 14 Aug 2024 06:43 next collapse

It’s truly crazy how much our information gets shared these days and how long it lingers.

My house spent a few years as a rental. I still get mail from people who haven’t lived here in over a decade (despite deliberate efforts to stop it).

My grandpa signed up for ever “store card” you can imagine to get all the deals and rewards programs. His landline virtually never stops ringing… On August 25th alone he got, no joke, 43 spam calls (I have his landline hooked up to Jolly Roger Telephone to try and filter some of this out and help him out, so I’m forming that statistic off of the emails from them).

It’s completely ridiculous and all of it needs to stop.

CubitOom@infosec.pub on 14 Aug 2024 07:09 next collapse

I’m on the verge.

Mwa@thelemmy.club on 14 Aug 2024 07:52 next collapse

Hate when they remove the reject all button

ssm@lemmy.sdf.org on 14 Aug 2024 08:23 next collapse

The most effective solution is just to wipe all cookies every time you close your browser, or creating strict cookie whitelists. Actually managing cookies on webpages is for normies.

bloubz@lemmygrad.ml on 14 Aug 2024 09:01 next collapse

No? If you accept tracking while on the page, this has consequences on your current session

void_vortex@lemmy.ml on 14 Aug 2024 09:41 next collapse

Sounds like a job for the Mullvad browser, since that clears cookies on every restart by default.

Rai@lemmy.dbzer0.com on 14 Aug 2024 15:37 collapse

Firefox Focus does this as well if you’re on a phone!

tetris11@lemmy.ml on 14 Aug 2024 10:39 next collapse

and then every time you visit that one good news site, you have to go through their cookie banner each time. That or install a cookie-denying addon and hope that they don’t sellout or sell your data.

davidagain@lemmy.world on 14 Aug 2024 10:50 collapse

You have a total of four choices:

1a. Wipe all their cookies every time, reject them every time they ask.
1b. Wipe all their cookies every time, accept them every time they ask. 2a. Don’t wipe cookies, keep the “essential” ones. 2b. Don’t wipe cookies, accept all our most of them.

2b is the only scenario where you might not get asked again. 1b is the easiest no thanks.

I use the duck duck go browser because it makes that the default and offers to whitelist sites for cookies if you log into them (but you can turn that off in settings). It also autorejects a lot of cookies that use common popups.

tetris11@lemmy.ml on 14 Aug 2024 10:54 collapse

2a seems the most rational, no?

Also maybe switch to mullvad-browser instead of DDG browser, since DDG has some controversies (search: “Zach Edwards” on the wiki) on what data it saves.

davidagain@lemmy.world on 14 Aug 2024 14:38 collapse

Thank you. Where can I find the wiki?

Edit: Wired says

DuckDuckGo Created a Privacy Exception for Microsoft Cybersecurity and privacy researcher Zach Edwards discovered a glaring hole in the privacy protections of DuckDuckGo’s purportedly privacy-focused browser: By examining the browser’s data flows on Facebook-owned website Workplace.com, Edwards found that the site’s Microsoft-placed tracking scripts continued to communicate back to Microsoft-owned domains like Bing and LinkedIn. DuckDuckGo CEO Gabriel Weinberg responded to Edwards on Twitter, admitting that “our search syndication agreement prevents us from stopping Microsoft-owned scripts from loading”—essentially admitting that a partnership deal DuckDuckGo struck with Microsoft includes creating a carveout that lets Microsoft track users of its browsers. Weinberg added that DuckDuckGo is “working to change that.” (A company spokesperson reiterated in an email to WIRED Weinberg’s assertion that none of this applies to DuckDuckGo search, adding that both its search and its browser offer more privacy protections than the competition.) In the meantime, the revelation blew a glaring hole of its own in the company’s reputation as a rare privacy-preserving tech firm. Turns out this surveillance capitalism thing is pretty hard to escape.

Nobilmantis@feddit.it on 14 Aug 2024 11:58 next collapse

Sadly that is not an option for firefox on android yet (while it is on desktop), the only choises you are left with are:

  • Use ff focus that completely resets the browser deleting every cookie in the process
  • Use normal ff and:
  1. Just accept that you have to deal with cookies and care to carefully select Reject on every banner
  2. Turn on delete data on “exit button press” (which sadly deletes everything again, with no possibility to whitelist some websites).

That said, i believe Firefox should have (even on android) their “total cookie protection” thing which puts them in separate containers for each domain, so you are somewhat protected by cookie cross-tracking, but i would still prefer to delete most of them at close.

vk6flab@lemmy.radio on 14 Aug 2024 12:16 next collapse

Having seem the inside of some of these trackers, I can assure you that cross-domain “protection” is a furphy. Also, 848 partners is small fries. For shits and giggles you should turn on network logging on Firefox or Chrome and open any modern news website.

Petter1@lemm.ee on 14 Aug 2024 15:05 collapse

Yea, 😂, I was very shocked on the amount of server contacted when I first time installed a pi-hole and opened a local news page while being on piHole webUI to test if it works.

trk@aussie.zone on 14 Aug 2024 12:40 next collapse

Sadly that is not an option for firefox on android yet

Eh?

<img alt="" src="https://aussie.zone/pictrs/image/e475382a-b5eb-4c48-ac65-2eca1944f7ab.png">

Nobilmantis@feddit.it on 14 Aug 2024 13:11 collapse

I was talking about there being no option to whitelist some websites to keep their cookies, and as you can see it is not present there, while the desktop versione has it

trk@aussie.zone on 14 Aug 2024 13:19 collapse

Oh, right.

You could try an extension: addons.mozilla.org/en-US/…/cookiewhitelist/

sunbytes@lemmy.world on 14 Aug 2024 15:23 collapse

Ghostery has an “auto-reject cookies” setting.

Angry_Autist@lemmy.world on 14 Aug 2024 13:27 collapse

Still doesn’t get rid of the popup, for that I use ublock origin.

Scrollone@feddit.it on 14 Aug 2024 17:21 next collapse

And enable the specific cookie alert list

ngwoo@lemmy.world on 14 Aug 2024 21:22 next collapse

The only way for the site to know to not show the pop-up again is ironically by saving that information in a cookie

Angry_Autist@lemmy.world on 14 Aug 2024 23:34 collapse

Or you could block all cookies from all associated domains and use uBlock Origin element picker to hide the popup.

I’m tired of expecting service and site owners to be human beings, and have learned the tools needed to curate my own experience. Hell I used to browse with javascript off for years until every shitbag UI graduate decided to cram it into every single site regardless of applicability.

Buddahriffic@lemmy.world on 15 Aug 2024 00:25 collapse

I like grid for that because it’s by default per-site permissions and also by default allows the sites own cookies while blocking any cookies for other domains.

It can involve some trial and error to get things working if the site uses a CDN or third party services for functionality, but I’ve found that it hasn’t yet been necessary to enable any 3rd party cookies to get any functionality working (at least none that I wanted to get working, maybe other sites that use Google or fb accounts would automatically log me in if I had those ones enabled, but those are things I specifically want to block).

Usually I’ll just need to enable some scripts and media from CDNs.

Angry_Autist@lemmy.world on 15 Aug 2024 04:13 collapse

I hate nearly everything about web 2.0, if I could thanos snap away Javascript and CSS I would it with zero remorse or regret. Humanity was happier before CDNs.

DmMacniel@feddit.org on 14 Aug 2024 08:24 next collapse

In the EU and UK this is also forbidden as rejecting should be as simple as accepting cookies.

Mwa@thelemmy.club on 14 Aug 2024 08:45 next collapse

Bruh

tetris11@lemmy.ml on 14 Aug 2024 10:37 collapse

In theory yes, in practice “uh-huh.”

Petter1@lemm.ee on 14 Aug 2024 08:41 next collapse

Consent-o-matic browser extension can handle a lot of cookie banners and automatically rejects all possible cookies.

Mwa@thelemmy.club on 14 Aug 2024 08:44 next collapse

Oh alr thank you

filister@lemmy.world on 14 Aug 2024 09:15 next collapse

Reject all is actually you agreeing on the legitimate interests loophole so this is also problematic.

ech@lemm.ee on 14 Aug 2024 09:20 next collapse

Please explain.

filister@lemmy.world on 14 Aug 2024 10:12 collapse
Petter1@lemm.ee on 14 Aug 2024 09:22 collapse

Yea… That is true. But I think, if uBlock blocks the banner, consent would not be able to reject/approve anything. Think of it as a fallback solution 😇well in my case.

tetris11@lemmy.ml on 14 Aug 2024 10:40 collapse

But some pages stiff you by disabling scroll capability if you hide the banner

Petter1@lemm.ee on 14 Aug 2024 11:23 next collapse

Yea, I tend to not use those sites and search for alternatives or archived versions. Sometimes you can scroll while reloading the page until scrolling is blocked again.

MigratingtoLemmy@lemmy.world on 14 Aug 2024 17:09 collapse

Javascript is the problem there

tetris11@lemmy.ml on 14 Aug 2024 17:54 collapse

Yep, but some pages load the text content programmatically, so even if you switch to reader mode you only get the blurb

MigratingtoLemmy@lemmy.world on 14 Aug 2024 19:09 collapse

Yeah they get skipped or opened on Brave incognito

void_vortex@lemmy.ml on 14 Aug 2024 09:44 collapse

I used to rely on Consent-O-Matic a lot, but I’m somewhat uncomfortable by the fact that the extension has full access to all web page content. I mean I understand why, but I’m still uncomfortable with it. In the end I ended up uninstalling it because it broke some sites so that they wouldn’t load at all, or got stuck into an infinite reload loop. On majority of cases it works alright though.

Petter1@lemm.ee on 14 Aug 2024 11:22 collapse

Yea, every extension has full access to any website, if you not make use of a whitelist/blacklist.

void_vortex@lemmy.ml on 14 Aug 2024 13:56 collapse

Some extensions, such as SponsorBlock for YouTube actually limit themselves so they can only operate when the browser is on youtube.com. This can be declared in the extension manifest. It’s a separate permission to access data on all web sites vs. access data on a specific website.

xthexder@l.sw0.com on 14 Aug 2024 20:48 collapse

Not helpful when something like Consent-o-matic needs to operate on every possible website with a cookie banner.

I have had the same concerns, since watching it click through things faster than I can see is scary. Maybe some day someone sneaks in a cookie banner detector that activates on banking pages to steal your money? uBlock Origin has similar risks, but at least it’s not actively controlling browser inputs.

Fluba@lemdro.id on 15 Aug 2024 02:55 collapse

I just implemented a cookie consent bar on my company’s website and the agencies/vendors who advertise for us were giving me so much shit for having reject available right away. But thankfully our Legal department said keep it there… Or else. “Hands tied… Soooooorry!”

stiephelando@discuss.tchncs.de on 14 Aug 2024 08:05 next collapse

This is for legal reasons mostly. They don’t think anyone reads this so they went for the most blunt and transparent language, which also gives them the most legal certainty. The banner is missing the reject all button though, which in Europe is seen as required by many of the privacy regulators.

What_Religion_R_They@hexbear.net on 14 Aug 2024 09:42 next collapse

Reject all will most likely be in the settings submenu. Websites are annoying and hide that function as far away as possible.

vk6flab@lemmy.radio on 14 Aug 2024 10:14 collapse

It is.

[deleted] on 14 Aug 2024 12:18 collapse
.
Sleepkever@lemm.ee on 14 Aug 2024 12:50 next collapse

How is it nonsense?

The EU law is that the reject all should be exactly as easy as the accept all button. 1 extra click, however minor of an inconvenience it is, is extra effort. And therefore strictly speaking in violation of the law.

Nothing will ever happen but it’s valid criticism.

lenz@lemmy.ml on 14 Aug 2024 12:59 next collapse

You underestimate people’s laziness and their burn out. An extra click to reject all is an extra click people won’t bother with. I literally used to go all the extra steps to reject these things, even when a reject all button was not provided. Plus I’ve found that sometimes the reject all button doesn’t actually reject all, and there are a few hidden settings still left to uncheck. It’s ridiculous. It should be 1 click, just like hitting accept is 1 click. The ease of use should be 1:1. I was getting burned out by those extra clicks and all that manual checking that took like 20s-2mins of my time. That adds up. All to read a single paragraph on some website? Bruh. Used to do this until I discovered ublock origin has settings that can be used to block cookie consent forms.

To you, one extra click is no big deal, like a paper cut of inconvenience. To me, it’s the thousandth papercut I’ve received. I am tired of it.

StupidBrotherInLaw@lemmy.world on 14 Aug 2024 14:51 collapse

Big oof here. Maybe make sure you understand what you’re talking about before criticizing others?

Etterra@lemmy.world on 14 Aug 2024 08:21 next collapse

848 partners? Damn I hope y’all got tested.

Now name them all.

Jimmycrackcrack@lemmy.ml on 14 Aug 2024 10:16 next collapse

I think you actually usually can get them to list them all, never much interested, they’re all going to be completely random names you never heard of, just so long as I can reject them all, that’s all I care about, otherwise I have to browse a different website on principle.

ShortFuse@lemmy.world on 14 Aug 2024 13:16 next collapse

STD: site-transferred data

Akasazh@feddit.nl on 14 Aug 2024 13:29 collapse

I feel there’s inflation over the word ‘partners’

Garbanzo@lemmy.world on 14 Aug 2024 08:24 next collapse

I’d like to see a cookie notice that just says “it’s your browser, figure out how to get it to handle cookies however you want. If you accept cookies we’re gonna use them and you can safely assume we’ll use them for anything and everything they might be useful for. European regulators can eat a bag of dicks.”

xilliah@beehaw.org on 14 Aug 2024 08:52 next collapse

Check out the Snowden movie. That’s so much worse.

SocialMediaRefugee@lemmy.ml on 14 Aug 2024 17:36 next collapse

I just occasionally wipe everything. I have to reenter passwords and such but it isn’t a big deal.

SocialMediaRefugee@lemmy.ml on 14 Aug 2024 17:38 next collapse

And the EU has forced us to answer that goddamn “do you accept cookies?” question on every frigging website. How many people just click “accept all” to get on with things?

isolatedscotch@discuss.tchncs.de on 14 Aug 2024 17:44 next collapse

ok to be honest i’d rather have the choice to accept or decline it and waste a couple seconds then having all of that enabled by default with no way to reject them

SturgiesYrFase@lemmy.ml on 14 Aug 2024 18:53 collapse

I have the ghosrtery extension on Firefox, I have it set to auto reject all tracking cookies, and reject all third party “legitimate interest” cookies. I’ve heard there’s other extensions that do the same, and maybe better, but I already have it set the way I want.

SkyezOpen@lemmy.world on 14 Aug 2024 17:45 next collapse

The EU has forced them to give us the option. Previously, they’d do all of that shit without telling you.

explodicle@sh.itjust.works on 14 Aug 2024 21:19 collapse

Previously I just opted out of all cookies as a browser setting.

drwho@beehaw.org on 14 Aug 2024 18:36 next collapse

Cookie Auto-Delete helps with that.

Swarfega@lemm.ee on 14 Aug 2024 18:52 collapse

There’s cookie lists in uBlock Origin. Just enable them.

neutronst4r@beehaw.org on 14 Aug 2024 18:53 collapse

THAT IS A BIG FAT LIE! The EU did not force any such thing. The EU simply said that people’s data cannot be used without consent. This is the website asking for consent.

Website developers have a perfectly valid choice not to collect any data. They chose their profits above your privacy.

I have a website and I don’t have a popup asking for consent, because I don’t need to, because I don’t collect any data.

prof_wafflez@lemmy.world on 14 Aug 2024 18:16 next collapse

As someone who works in marketing operations, I can confidently say that many people plainly do not understand what cookies do and why they exist. There are plenty of cookies that are good and useful, but third party advertising tracking cookies are the devil folks don’t like. Necessary, performance and functional cookies are all chill.

vk6flab@lemmy.radio on 14 Aug 2024 18:32 next collapse

Like the cookie that stores the “Reject All the cookies” response for your next visit 😇

prof_wafflez@lemmy.world on 14 Aug 2024 20:26 collapse

Exactly - which would likely be a persistent necessary cookie on most websites.

unwarlikeExtortion@lemmy.ml on 14 Aug 2024 19:53 collapse

A question: What is preventing the site using one huge cookie for all purposes, thus preventing fully functional use of the site without also enabling all other forms of tracking?

prof_wafflez@lemmy.world on 14 Aug 2024 20:23 next collapse

Cookies are very small snippets of code that have a specific purpose. Making a one-size-fits-all cookie would make them complicated and much harder to track - which goes against the point of a cookie. Also, cookies are often independent of each other because they are from different providers/different tools. Having a one-size-fits-all cookie would also present a security hazard and make laws similar to GDPR about cookie tracking difficult to implement. An example of a tool that actually does use one cookie is Adobe’s Marketo. You can read some more about them here. termly.io/resources/…/types-of-internet-cookies/

Buddahriffic@lemmy.world on 14 Aug 2024 20:40 collapse

Same thing that’s preventing them from ignoring your choices or not offering them in the first place: nothing technical; it’s all up to the legal system.

I’m not sure how sites generally do it, but from my web dev experience in the past, I wouldn’t be surprised if it is actually implemented as one giant cookie. Iirc cookies are attached to domains and one domain can’t access another’s cookies. So if they are sharing the data on their end, I’d guess it is one big cookie. If they have their site set up to make the clients share the data themselves, I’d guess there’s a cookie for each partner’s domain.

It’s even possible that the information is shared without using actual cookies at all, since data can be sent to servers using the http get request. If you see ? in the url, everything after that is a list of arguments and values… Though the entire URL (after the domain, which maps it to that server) is data and doesn’t have to map to a directory structure and file on a server. Maybe this falls under the umbrella of “cookie” despite technically not being a cookie.

Or maybe it’s a loophole where the legislation focused on just cookies and falls back to these methods. Probably not, because if it’s done on the client side, it would be easy to detect by anyone who knows how to look. But who knows what’s going on on the server side of things?

Edit: my knowledge here is dated and outside of my specializations, so consider this more technically informed speculation than necessarily applicable to how things generally work. I say this because I see another comment came in while I was writing this that contradicts mine about a giant cookie being technically possible. My own use of cookies was to store a session id so that php could find the data that was being stored server side that was necessary for site functionality (like storing logged in state, user id, and other internal stuff we don’t want users being able to change by editing a cookie). They worked like maps iirc where you just give them key:value pairs, thus could store an arbitrary amount of data.

emberpunk@lemmy.ml on 14 Aug 2024 23:55 next collapse

Well. I appreciate the honesty… I guess.

sverit@lemmy.ml on 15 Aug 2024 00:00 next collapse

github.com/…/I-Still-Dont-Care-About-Cookies

jjffnn@feddit.dk on 15 Aug 2024 09:46 collapse

Alternative if the first one doesn’t tickle your fancy.
github.com/cavi-au/Consent-O-Matic

bitwolf@lemmy.one on 15 Aug 2024 01:10 next collapse

Yea because I want a news site to have my precise geolocation data.

todd_bonzalez@lemm.ee on 15 Aug 2024 02:30 next collapse

Remember when they passed laws protecting our library and video store rental histories instead of letting data brokers hoover up every song you listen to and every news article you read?

makr_alland@lemmy.world on 15 Aug 2024 17:03 collapse

If you’re referring to the US’ Video Privacy Protection Act, it was passed only because it slightly embarrassed a Supreme Court nominee.

So for there to be half-decent online privacy laws in the US, first someone will have to leak Clarence Thomas’ Pornhub search history or something like that.

Reddfugee42@lemmy.world on 15 Aug 2024 03:15 next collapse

Me: *logs on to their website*

Them: <img alt="" src="https://lemmy.world/pictrs/image/b17baacc-e807-4145-bf94-9f3b999618fe.gif">

WhosMansIsThis@lemmy.sdf.org on 15 Aug 2024 03:30 next collapse

Don’t worry bro, its just me and 2000 of my closest friends. Totally legit.

Nyanix@lemmy.ca on 15 Aug 2024 17:52 next collapse

2 days and this post has fewer likes than number of companies that get your data for visiting the Verge. Holy crap, that’s terrifying

wuphysics87@lemmy.ml on 15 Aug 2024 18:25 collapse

We all have a fundamental right to privacy, which is constantly violated. Not just on a daily basis, but on a minute by minute basis.

But to play devil’s advocate for a moment to assuage some FUD around posts like this, how many of the absurd amount of cookies overlap in otherwise innoculous ways. For instance, product tracking cookies. Say you bought a pumpkin on Amazon, and that drops a gorde cookie, a pumpkin spice cookie, a cornucopia cookie etc.

That’s certainly not the same as buy a pumpkin, track your location around the nearest pumpkin patch, read your grandma’s emails about pumpkins, and collect information to determine your likelihood of buying another pumpkin based on your sexual orientation.

The latter certainly exists, but does anyone know much about the former? How prevalent would they be in that 850?