7 ms·
> Remember the cookie consent button you clicked at the very beginning? That's right, it was a Clickjacking attempt :) Brutal. I have gone 100% autopilot to “c
by etxm 8y ago
> Remember the cookie consent button you clicked at the very beginning? That's right, it was a Clickjacking attempt :)
Brutal. I have gone 100% autopilot to “cookie consent buttons”. I’m curious how many people are. That’s a very clever place to click jack.
- jacquesm 8y agoAnything that users get conditioned to because of repeated appearance has this potential, and has been warned against. What should really bother you is that rather than putting up these stupid cookiewalls the intended effect of the legislation was to get websites to stop tracking everything and everybody and this was the result. Self regulation didn't work, then there was a soft push, which resulted in a lot of wriggling to get around the laws intent and now we will see the hard push. I wonder how many parties will have the guts to try to wiggle out of the hard push, and I'm quietly hoping for one of the larger offenders to be hit so hard they have to shut down, which might send a useful message to the rest. Analytics is fine but this wholesale profile building is really across the line.
- oliv__ 8y agoThose cookie disclaimers are one of the most retarded things on the web.
- craftyguy 8y agoIIRC the EU mandated that behavior. Edit: More info: http://ec.europa.eu/ipg/basics/legal/cookies/index_en.htm http://ec.europa.eu/ipg/basics/legal/cookies/index_en.htm
- fixermark 8y agoWhat really bothers me is the law's original design got hamstrung when governments realized it would subvert their own site analytics, and we ended up with the quite-empty-but-mandatory dialog informing users that a site does a thing that is pretty fundamental web technology (not quite as fundamental as "Transmits data using the HTTP protocol", but pretty close)---instead of scrubbing the whole initiative or replacing it with a Europe-wide education initiative ("The EU presents: browsing and you"). Maybe regulation would work better if there weren't such a disconnect between what lawmakers think people want and the way the technology works.
- jey 8y ago> got hamstrung when governments realized it would subvert their own site analytics That's a pretty strong claim. Citation needed.
- labster 8y agonod I always thought it was a combination of slow legislative process, legislators not understanding tech, and industry pushback. I somehow doubt underfunded government IT departments had that much pull.
- djsumdog 8y agoAm I missing something? I don't see anything in the Network panel of my debugging console when I click the cookie consent button.
- ocdtrekkie 8y agoGoogle banned him from using their API (instead of fixing the issue). It worked when he posted it, it doesn't work now.
- a_imho 8y agoWhy would you ever click one of those buttons?
- nikanj 8y agoThey hover up and cover half of the screen on mobile
- loco5niner 8y agoBecause that's how you make them go away.
- jowsie 8y agoNot clicking it doesn't stop them from using cookies/tracking you. The box is simply to inform you that they ARE doing it, whether you like it or not.
- a_imho 8y agoHow is that consent?
- MereInterest 8y agoThe implication is that, now that you know that cookies are used for tracking, remaining on the site is implied consent. Like the omnipresent "this call may be recorded" statement at call centers. It is an instance of a much broader issue, where contracts are no longer the result of any negotiation, but are a take it or leave it option.
- a_imho 8y agoI understand going after each and every website would be impractical, but imo a disclaimer with a button - most probably after the fact the site already transmitted a handful of cookies - does not comply with the spirit of the regulation. [1] https://www.cookielaw.org/the-cookie-law/ https://www.cookielaw.org/the-cookie-law/
- 8y ago
- ojosilva 8y agoSame here. And it's so annoying that I'm scared of resetting my Android phone just so that I don't have to hit cookie consent everywhere... Anyway, now with GDPR consent buttons on their way (at least in Europe), there's a fresh new opportunity for black hats to click jack their whole population of visitors all over again.
- fivre 8y agoCookie disclaimers at this point need to be taken to their logical conclusion: browser vendors and site operators should add a standard Yes-I-Know-What-Cookies-Are header to the next HTTP update, which can then be vomited at sites by default browser configuration to let them know it's okay to auto-hide the banner. Hell, let's repurpose Do Not Track for it; it's not like it's being used for anything meaningful otherwise.
- stochastic_monk 8y agoDoes anyone honor Do Not Track requests?
- colejohnson66 8y agoAdafruit does. They put their YouTube videos behind a click if you send a “Do Not Track” header.
- criley2 8y agoI feel like honoring Do Not Tracks is like honoring deadbolts on wooden doors. Most people honor it, but you're not using it to keep those people out...
- jake_the_third 8y agoI expect that the reason why most people honor the first is the high likelihood of getting caught or seen. This deterrent does not exist for web tracking. I think it's more likely that most tracking companies ignore do not track.
- klapinat0r 8y agoMedium comes to mind (for embedded) https://medium.com/policy/how-we-handle-do-not-track-requests-on-medium-f2b4b4fb7c5e https://medium.com/policy/how-we-handle-do-not-track-request...
- LinuxBender 8y agoIs anyone required to honor DNT requests? What happens if they don't?
- outside2344 8y agoThe irony of a user having their privacy violated by a pop-up meant to protect their privacy is infuriating.
- craftyguy 8y agoI just immediately hit those 'cookie consent buttons/boxes' with a uBlock Origin 'block element'. Gets rid of them permanently, and doesn't require submitting/clicking anything.
- odammit 8y agoKnowing that most of the sites use that box to let you acknowledge they are tracking. I wonder how that applies legally if they happen to collect data on you and you haven’t given consent.