6 ms·

Wow, when trying to access this from the EU, I'm blocked by this huge pop-up telling me to either accept their tracking or fuck off. The cookie policy makes no

by swebs 8y ago

Wow, when trying to access this from the EU, I'm blocked by this huge pop-up telling me to either accept their tracking or fuck off. The cookie policy makes no mention on how to access the site without clicking "I accept", it just directs you to optout.aboutads.info. https://i.imgur.com/dK73MUi.png https://i.imgur.com/dK73MUi.png Is this really GDPR compliant?

orixilus 8y ago
I tried to see your image, but I get another popup :D https://ibb.co/mO99fo https://ibb.co/mO99fo
zingmars 8y ago
If you have JS disabled (or use noscript or umatrix or similar addons) you can just scroll down without needing to accept anything. ¯\_(ツ)_/¯
the_mitsuhiko 8y ago
It’s one if the worst I have seen. There is no way not to accept this. I can’t see how this is permitted.
- AlexandrB 8y ago
  Meanwhile the headlining article is "NO ONE’S READY FOR GDPR". The irony is palpable.
  - the_mitsuhiko 8y ago
    I can’t even read the privacy policy without accepting the prompt.
- morsch 8y ago
  On the bright side, it made me find out that ublock's block element feature is really easy to use. Even works on mobile!
- g_lined 8y ago
  I use 'Kill Sticky' to get around these popovers. Usually it works. Sometimes scrolling is broken. But it's usually better than clicking 'ok'. https://alisdair.mcdiarmid.org/kill-sticky-headers/ https://alisdair.mcdiarmid.org/kill-sticky-headers/
- LoSboccacc 8y ago
  and you get a geo-localizing cookie installed even before clicking 'accept' - and that's with mublock already filtering out 7 requests
- deleted 8y ago
  [deleted]
tzahola 8y ago
Highly doubt it.
Aaargh20318 8y ago
> Is this really GDPR compliant? No, it's not.
Aeolun 8y ago
I don't know, this isn't new. Literally every website in the EU has been asking for your permission to store cookies for years.
- quohM0Ho 8y ago
  ePrivacy directive != GDPR. Even if it is ok under the former it may not be under the latter. And considering that they just updated their privacy policy they seem to be trying to conform to the latter.
pawelkomarnicki 8y ago
It is not.
throwahey 8y ago
Start by disabling javascript, then only whitelisting websites when necessary. Also consider whether certain content is even worth vieweing when confronted with an "enable JS" banner. Your web experience is now 1000% better.
- itake 8y ago
  I use uMatrix to block loading content from unwanted domains, but I am considering disabling it. ~30% of websites I visit, I spend 30s adjusting the whitelist to get the page to load properly. I would think this would make my browsing experience even more cumbersome. Is there no alternative?
  - severine 8y ago
    I'm of the opinion that "mastering" uMatrix pays off heaps. Do you use the Scope Selector, like in this wiki example? https://github.com/gorhill/uMatrix/wiki/Scope-selector https://github.com/gorhill/uMatrix/wiki/Scope-selector
tialaramex 8y ago
No. Basically the GDPR is structured around a whole bunch of reasons why you might _need_ to store and process data about people ("Subjects"), for which you have implicit permission because it's necessary to something you're doing for the Subject. You need to make sure Subjects can find out what you needed, and why, and you can't change your mind later. These purposes do not need Consent. You don't need to Consent to a retailer knowing your credit card number when you use the card to buy something. You don't need to Consent to Amazon knowing your delivery address when you buy stuff. Consent comes in when you and the Subject both want to enable processing that isn't necessary. For example, if I buy a book from Amazon, it makes sense that I'd get a confirmatory email saying I ordered the book, and they're agreeing to sell it to me, and another one saying the book has been shipped and will be with me in 2-4 days. Those feel pretty necessary. But why would I get email about how great Amazon's new Fire tablet is? Well, Amazon could try asking me for Consent to send that sort of crap to me. The GDPR is clear that you can't insist on implied Consent, you can't have "By visiting this web page I consent" or "To stop receiving our marketing, just unselect the default-selected boxes in the marketing permissions sub-section of your user profile, this may take up to 400 years to take effect" or similar nonsense. It needs to be a clear informed choice to give you this extra permission. Some of the specifics will get litigated. I'm sure somebody will try to claim it's "necessary" to their business to track people and sell everything they possibly can, and I expect European courts to decide that's laughable nonsense.
- bluelu 8y ago
  Tumblr is not any better. No ways to access any page without clicking OK https://www.tumblr.com/privacy/consent?redirect=https%3A%2F%2Fwww.tumblr.com%2Fnew%2Fblog https://www.tumblr.com/privacy/consent?redirect=https%3A%2F%...
  - criley2 8y ago
    Why do you have the 'right' to access a private server without agreeing to a terms of use?
    - Maarten88 8y ago
Angostura 8y ago
Very poor. On Mac Safari, I switched to Reader mode, which circumvented it. The imgur one that gets displayed is very good by comparison, except arguably some of those options shouldn't be pre-ticked.
thvasilo 8y ago
I don't think this is GDPR compliant, the choice is either track or go to another website. For the time being I added these to uBlock: www.theverge.com##.privacy-consent-notice www.theverge.com###privacy-consent-ui www.theverge.com###privacyConsent Not sure if I'm now doing something illegal or they are, since I never consented but they're probably tracking my visits now ¯\_(ツ)_/¯
- hartator 8y ago
  That’s really meta, I guess adding thse rules to uBlock means you consent.
- letsgetphysITal 8y ago
  Submit a complaint. You didn't accept the terms, and they breached GDPR by not offering an alternative without tracking.
  - criley2 8y ago
    This makes no sense. Tracking for advertising is the business model of free content. That's how they pay for the "free" content you wish to consume without paying. Do Europeans really think GDPR is a new way to steal internet content without having to pay? It seems like a hard block on all Europeans visiting websites like this would be better (and totally legal, these are private servers with a terms of use, accessing an american server in violation of the terms of use is an American felony) because if it is now illegal in Europe for Euro freeloaders to implicitly pay for the content they view, then why let the free people in? Sounds like its time for a new library for sites that are available free worldwide where we switch to a subscription/pay/lockout only model for European customers. If you can't monetize on ads by law, then, time to start charging for access at the front door, right?
    - Maarten88 8y ago
      > Tracking for advertising is the business model of free content. Well, too bad, that business model has just become illegal in EU. Publishers will have to make do with old style banners or ads. They can still target ads using the content of the page, assuming readers of the article will be interested in the subject. ... or get consent in a compliant way. Success with that!
deleted 8y ago
[deleted]
deleted 8y ago
[deleted]
letsgetphysITal 8y ago
Add the following to My Filters in uBlock Origin: www.theverge.com###privacy-consent-ui www.theverge.com###privacyConsent www.theverge.com##.privacy-consent-notice
stordoff 8y ago
CBSi (e.g. Giant Bomb) are using similar wording: https://i.imgur.com/8wQGvIv.png https://i.imgur.com/8wQGvIv.png. There _is_ a "Manage Settings" link, but they are treating "Google Analytics / Adobe Analytics / comScore / Akamai / Nielsen / Evidon / Moat / Cedexis / Chartbeat / Index Tag Manager / Tealium Tag Manager / Google Ad Serving" as "necessary cookies", so you cannot opt-out. You get redirected to https://l3.evidon.com/site/425/5420/6 https://l3.evidon.com/site/425/5420/6 if you click "Manage Settings".

by swebs 8y ago

orixilus 8y ago

I tried to see your image, but I get another popup :D https://ibb.co/mO99fo https://ibb.co/mO99fo

zingmars 8y ago

If you have JS disabled (or use noscript or umatrix or similar addons) you can just scroll down without needing to accept anything. ¯\_(ツ)_/¯

the_mitsuhiko 8y ago

It’s one if the worst I have seen. There is no way not to accept this. I can’t see how this is permitted.

AlexandrB 8y ago
Meanwhile the headlining article is "NO ONE’S READY FOR GDPR". The irony is palpable.
- the_mitsuhiko 8y ago
  I can’t even read the privacy policy without accepting the prompt.
morsch 8y ago
On the bright side, it made me find out that ublock's block element feature is really easy to use. Even works on mobile!
g_lined 8y ago
I use 'Kill Sticky' to get around these popovers. Usually it works. Sometimes scrolling is broken. But it's usually better than clicking 'ok'. https://alisdair.mcdiarmid.org/kill-sticky-headers/ https://alisdair.mcdiarmid.org/kill-sticky-headers/
LoSboccacc 8y ago
and you get a geo-localizing cookie installed even before clicking 'accept' - and that's with mublock already filtering out 7 requests
deleted 8y ago
[deleted]

tzahola 8y ago

Highly doubt it.

Aaargh20318 8y ago

> Is this really GDPR compliant? No, it's not.

Aeolun 8y ago

I don't know, this isn't new. Literally every website in the EU has been asking for your permission to store cookies for years.

quohM0Ho 8y ago
ePrivacy directive != GDPR. Even if it is ok under the former it may not be under the latter. And considering that they just updated their privacy policy they seem to be trying to conform to the latter.

pawelkomarnicki 8y ago

It is not.

throwahey 8y ago

Start by disabling javascript, then only whitelisting websites when necessary. Also consider whether certain content is even worth vieweing when confronted with an "enable JS" banner. Your web experience is now 1000% better.

itake 8y ago
I use uMatrix to block loading content from unwanted domains, but I am considering disabling it. ~30% of websites I visit, I spend 30s adjusting the whitelist to get the page to load properly. I would think this would make my browsing experience even more cumbersome. Is there no alternative?
- severine 8y ago
  I'm of the opinion that "mastering" uMatrix pays off heaps. Do you use the Scope Selector, like in this wiki example? https://github.com/gorhill/uMatrix/wiki/Scope-selector https://github.com/gorhill/uMatrix/wiki/Scope-selector

tialaramex 8y ago

No. Basically the GDPR is structured around a whole bunch of reasons why you might _need_ to store and process data about people ("Subjects"), for which you have implicit permission because it's necessary to something you're doing for the Subject. You need to make sure Subjects can find out what you needed, and why, and you can't change your mind later. These purposes do not need Consent. You don't need to Consent to a retailer knowing your credit card number when you use the card to buy something. You don't need to Consent to Amazon knowing your delivery address when you buy stuff. Consent comes in when you and the Subject both want to enable processing that isn't necessary. For example, if I buy a book from Amazon, it makes sense that I'd get a confirmatory email saying I ordered the book, and they're agreeing to sell it to me, and another one saying the book has been shipped and will be with me in 2-4 days. Those feel pretty necessary. But why would I get email about how great Amazon's new Fire tablet is? Well, Amazon could try asking me for Consent to send that sort of crap to me. The GDPR is clear that you can't insist on implied Consent, you can't have "By visiting this web page I consent" or "To stop receiving our marketing, just unselect the default-selected boxes in the marketing permissions sub-section of your user profile, this may take up to 400 years to take effect" or similar nonsense. It needs to be a clear informed choice to give you this extra permission. Some of the specifics will get litigated. I'm sure somebody will try to claim it's "necessary" to their business to track people and sell everything they possibly can, and I expect European courts to decide that's laughable nonsense.

bluelu 8y ago
Tumblr is not any better. No ways to access any page without clicking OK https://www.tumblr.com/privacy/consent?redirect=https%3A%2F%2Fwww.tumblr.com%2Fnew%2Fblog https://www.tumblr.com/privacy/consent?redirect=https%3A%2F%...
- criley2 8y ago
  Why do you have the 'right' to access a private server without agreeing to a terms of use?
  - Maarten88 8y ago

Angostura 8y ago

Very poor. On Mac Safari, I switched to Reader mode, which circumvented it. The imgur one that gets displayed is very good by comparison, except arguably some of those options shouldn't be pre-ticked.

thvasilo 8y ago

I don't think this is GDPR compliant, the choice is either track or go to another website. For the time being I added these to uBlock: www.theverge.com##.privacy-consent-notice www.theverge.com###privacy-consent-ui www.theverge.com###privacyConsent Not sure if I'm now doing something illegal or they are, since I never consented but they're probably tracking my visits now ¯\_(ツ)_/¯

hartator 8y ago
That’s really meta, I guess adding thse rules to uBlock means you consent.
letsgetphysITal 8y ago
Submit a complaint. You didn't accept the terms, and they breached GDPR by not offering an alternative without tracking.
- criley2 8y ago
  This makes no sense. Tracking for advertising is the business model of free content. That's how they pay for the "free" content you wish to consume without paying. Do Europeans really think GDPR is a new way to steal internet content without having to pay? It seems like a hard block on all Europeans visiting websites like this would be better (and totally legal, these are private servers with a terms of use, accessing an american server in violation of the terms of use is an American felony) because if it is now illegal in Europe for Euro freeloaders to implicitly pay for the content they view, then why let the free people in? Sounds like its time for a new library for sites that are available free worldwide where we switch to a subscription/pay/lockout only model for European customers. If you can't monetize on ads by law, then, time to start charging for access at the front door, right?
  - Maarten88 8y ago
    > Tracking for advertising is the business model of free content. Well, too bad, that business model has just become illegal in EU. Publishers will have to make do with old style banners or ads. They can still target ads using the content of the page, assuming readers of the article will be interested in the subject. ... or get consent in a compliant way. Success with that!

deleted 8y ago

[deleted]

deleted 8y ago

[deleted]

letsgetphysITal 8y ago

Add the following to My Filters in uBlock Origin: www.theverge.com###privacy-consent-ui www.theverge.com###privacyConsent www.theverge.com##.privacy-consent-notice

stordoff 8y ago

CBSi (e.g. Giant Bomb) are using similar wording: https://i.imgur.com/8wQGvIv.png https://i.imgur.com/8wQGvIv.png. There _is_ a "Manage Settings" link, but they are treating "Google Analytics / Adobe Analytics / comScore / Akamai / Nielsen / Evidon / Moat / Cedexis / Chartbeat / Index Tag Manager / Tealium Tag Manager / Google Ad Serving" as "necessary cookies", so you cannot opt-out. You get redirected to https://l3.evidon.com/site/425/5420/6 https://l3.evidon.com/site/425/5420/6 if you click "Manage Settings".