4 ms·

> In plainer English, this is being interpreted by data experts as the regulator stating that consent to processing personal data cannot be gained through a fra

by gnud 8y ago

> In plainer English, this is being interpreted by data experts as the regulator stating that consent to processing personal data cannot be gained through a framework arrangement which bundles a number of uses behind a single “I agree” button that, when clicked, passes consent to partners via a contractual relationship. Now, I guess it's obvious to complain about the idiotic, user-hostile and down-right evil Oath consent pop-over that I got when I visited TC. I'm gonna do it anyway. Here's hoping this ruling stands.

peteri 8y ago
I haven't read techcrunch or any site with that oauth pop-over since GDPR came in. It's super obnoxious.
- gnud 8y ago
  Pretty sure it's not OAuth, but Oath. Also pretty sure they named the company Oath so that people would think "oh this is another OAuth permission box, OK".
  - peteri 8y ago
    You are so right, it is Oath
  - scrollaway 8y ago
    > Also pretty sure they named the company Oath so that people would think "oh this is another OAuth permission box, OK". I think that's just developer bias. "OAuth" is not a thing non-developers know, even by name.
  - jefftk 8y ago
    It looks like the "Oath" brand is going away, and they're going to use "Verizon Media Group": https://www.theverge.com/2018/11/5/18064172/verizon-oath-media-group-rebrand https://www.theverge.com/2018/11/5/18064172/verizon-oath-med...
    - gpvos 8y ago
      Good. It was a truly horrible name.
- karrotwaltz 8y ago
  When GDPR popups started appearing, I modified my Kill Sticky bookmark-script to also re-enable scrolling. Works most of the time for any kind of popup. Here's the script: https://pastebin.com/NfCyDLw8 https://pastebin.com/NfCyDLw8
  - CamperBob2 8y ago
    Thanks for this script, by the way -- it's come in handy many times.
shakna 8y ago
It's even more ironic in French [0], here we have a single click "I agree" button, in French, covering up a reading about a French ruling that suggests it's worthless. [0] https://shakna.keybase.pub/oath_techcrunch.png https://shakna.keybase.pub/oath_techcrunch.png
- ElBarto 8y ago
  That is really horrible. It says "Select 'OK' to authorise 'Oath' and our partners to use your data." Is there a more general, less specific, way to phrase this? It's basically "please let anyone use your data for anything".
Nursie 8y ago
Of the dark patterns I've found in this space, theirs is the worst so far. They hide away what they plan to do, and if you start digging in to try to find controls... well good luck, I haven't found any. You can get to all sorts of policies, various login pages and lots of spurious info, but as yet no controls. Other dark patterns I've seen are - A page attempts to put you off by making you manually deactivate hundreds of different services if you object to them (though they of course have a handy 'enable all' button). A page gives you a big green "Accept All" button, and a 'reject all' option which looks greyed out and is smaller. When pressed it takes you to another dialog with a big green "Go Back" button and another, smaller, dimmer link for "Leave". The "Leave" link is the one that gets you back to the page, rejection preference intact. These seem contrary to the spirit of the GDPR, I guess we'll see in time if they are deemed to contravene the law. The TC/Oath one definitely seems to be over the line. --edit-- Missed one - A page allows you to set various controls and sliders to reject its data sharing, but then sits for several minutes "processing" your lack of consent. When it eventually completes you get a message saying that they don't have a version of the page they can show you without the data sharing cookies, so sorry, please check again in a few months.
- cr1895 8y ago
  >A page attempts to put you off by making you manually deactivate hundreds of different services if you object to them (though they of course have a handy 'enable all' button). I see this often too. Doesn't this directly contravene the text of the GDPR, much less the spirit of it?
  - robin_reala 8y ago
    Yes. Opt in is a requirement, not opt out.
- dspillett 8y ago
  > A page attempts to put you off by making you manually deactivate hundreds of different services if you object to them Some of which are marked as "opt-out through partner", with no link or other details about how one would do that. While the trackers are making it a faf to opt out (rather than as the legislation actually required: making it an opt-in situation) I'll just keep on with my side of the arms war that is ad-blocking. Their loss, not mine. I can't say I feel I've missed out on anything by sites failing/refusing to display with ads blocked, links that redirect through trackers not working at all, or just plain backing out of sites that are obnoxious (and in breach) with "by continuing or closing this banner..." and other such.
scoot_718 8y ago
Yup. No more contracts to provide services. France is idiotic.
- icebraining 8y ago
  Contracts are fine. You just can't pay with your first-born, your freedom or your private data.

by gnud 8y ago

peteri 8y ago

I haven't read techcrunch or any site with that oauth pop-over since GDPR came in. It's super obnoxious.

gnud 8y ago
Pretty sure it's not OAuth, but Oath. Also pretty sure they named the company Oath so that people would think "oh this is another OAuth permission box, OK".
- peteri 8y ago
  You are so right, it is Oath
- scrollaway 8y ago
  > Also pretty sure they named the company Oath so that people would think "oh this is another OAuth permission box, OK". I think that's just developer bias. "OAuth" is not a thing non-developers know, even by name.
- jefftk 8y ago
  It looks like the "Oath" brand is going away, and they're going to use "Verizon Media Group": https://www.theverge.com/2018/11/5/18064172/verizon-oath-media-group-rebrand https://www.theverge.com/2018/11/5/18064172/verizon-oath-med...
  - gpvos 8y ago
    Good. It was a truly horrible name.
karrotwaltz 8y ago
When GDPR popups started appearing, I modified my Kill Sticky bookmark-script to also re-enable scrolling. Works most of the time for any kind of popup. Here's the script: https://pastebin.com/NfCyDLw8 https://pastebin.com/NfCyDLw8
- CamperBob2 8y ago
  Thanks for this script, by the way -- it's come in handy many times.

shakna 8y ago

It's even more ironic in French [0], here we have a single click "I agree" button, in French, covering up a reading about a French ruling that suggests it's worthless. [0] https://shakna.keybase.pub/oath_techcrunch.png https://shakna.keybase.pub/oath_techcrunch.png

ElBarto 8y ago
That is really horrible. It says "Select 'OK' to authorise 'Oath' and our partners to use your data." Is there a more general, less specific, way to phrase this? It's basically "please let anyone use your data for anything".

Nursie 8y ago

Of the dark patterns I've found in this space, theirs is the worst so far. They hide away what they plan to do, and if you start digging in to try to find controls... well good luck, I haven't found any. You can get to all sorts of policies, various login pages and lots of spurious info, but as yet no controls. Other dark patterns I've seen are - A page attempts to put you off by making you manually deactivate hundreds of different services if you object to them (though they of course have a handy 'enable all' button). A page gives you a big green "Accept All" button, and a 'reject all' option which looks greyed out and is smaller. When pressed it takes you to another dialog with a big green "Go Back" button and another, smaller, dimmer link for "Leave". The "Leave" link is the one that gets you back to the page, rejection preference intact. These seem contrary to the spirit of the GDPR, I guess we'll see in time if they are deemed to contravene the law. The TC/Oath one definitely seems to be over the line. --edit-- Missed one - A page allows you to set various controls and sliders to reject its data sharing, but then sits for several minutes "processing" your lack of consent. When it eventually completes you get a message saying that they don't have a version of the page they can show you without the data sharing cookies, so sorry, please check again in a few months.

cr1895 8y ago
>A page attempts to put you off by making you manually deactivate hundreds of different services if you object to them (though they of course have a handy 'enable all' button). I see this often too. Doesn't this directly contravene the text of the GDPR, much less the spirit of it?
- robin_reala 8y ago
  Yes. Opt in is a requirement, not opt out.
dspillett 8y ago
> A page attempts to put you off by making you manually deactivate hundreds of different services if you object to them Some of which are marked as "opt-out through partner", with no link or other details about how one would do that. While the trackers are making it a faf to opt out (rather than as the legislation actually required: making it an opt-in situation) I'll just keep on with my side of the arms war that is ad-blocking. Their loss, not mine. I can't say I feel I've missed out on anything by sites failing/refusing to display with ads blocked, links that redirect through trackers not working at all, or just plain backing out of sites that are obnoxious (and in breach) with "by continuing or closing this banner..." and other such.

scoot_718 8y ago

Yup. No more contracts to provide services. France is idiotic.

icebraining 8y ago
Contracts are fine. You just can't pay with your first-born, your freedom or your private data.