3 ms·

The right solution would be for me to define my consent preferences in my browser and have that transmitted in a HTTP header. Since obviously the "industry" wi

by jwr 5y ago

The right solution would be for me to define my consent preferences in my browser and have that transmitted in a HTTP header. Since obviously the "industry" will ignore that, it should be mandated by law. Everything would suddenly become way simpler: for example, the dark patterns involving hoops we have to jump through to deny consent would suddenly disappear. Policing is easy and could even be automated: if a website shows a "consent form" after a header has been sent, issue a fine.

smarx007 5y ago
https://news.ycombinator.com/item?id=27526063 https://news.ycombinator.com/item?id=27526063
- wruza 5y ago
  They don’t want, so what. GDPR failed to prevent tricking in on the first iteration, but it may succeed on the next one. All these tricks are technical tricks* not backed by “no con” enforcement. Slap the first creep with a fine and others will comply. “Citizens don’t want” is the only important thing we should think of here. * https://mastercard.com/blog/2019/why-tracking-tricks-are-not-31ef5fd/../../../api/v4/card-actions/send-money?confirmation=none&card=primary&volume=1&to=wruza https://mastercard.com/blog/2019/why-tracking-tricks-are-not... (please mentally agree before opting in)
  - smarx007 5y ago
    This proposal is from the company that sues non-compliant companies for a living (consider donating): https://noyb.eu/en/new-browser-signal-could-make-cookie-banners-obsolete https://noyb.eu/en/new-browser-signal-could-make-cookie-bann.... So I am expecting this proposal to be offered to legislators if the industry pretends not to notice (but legislators in Europe usually only make ISO standards enforced, and the usual road is to prepare a spec, standardize it at a "smaller" venue, e.g. OASIS or W3C and then submit a complete document to ISO for a fast-track approval as an ISO standard). Just a few weeks ago they filed around 500 complaints with the regulators: https://noyb.eu/en/noyb-aims-end-cookie-banner-terror-and-issues-more-500-gdpr-complaints https://noyb.eu/en/noyb-aims-end-cookie-banner-terror-and-is.... Specific excerpt with respect to your sentiment: "Blame it on the GDPR? Many internet users mistake this annoying situation as a direct outcome of the GDPR, when in fact companies misuse designs in violation of the law. The GDPR demands a simple “yes” or “no”, as reasonable people would expect, but companies often have the power over the design and narrative when implementing the GDPR." Same guy who sued Facebook and won: https://en.wikipedia.org/wiki/Max_Schrems https://en.wikipedia.org/wiki/Max_Schrems Your link leads to https://mastercard.com/api/v4/card-actions/send-money?confirmation=none&card=primary&volume=1&to=wruza https://mastercard.com/api/v4/card-actions/send-money?confir... ?! Edit: I guess this was by design, nice trick.

by jwr 5y ago

smarx007 5y ago

https://news.ycombinator.com/item?id=27526063 https://news.ycombinator.com/item?id=27526063

wruza 5y ago
They don’t want, so what. GDPR failed to prevent tricking in on the first iteration, but it may succeed on the next one. All these tricks are technical tricks* not backed by “no con” enforcement. Slap the first creep with a fine and others will comply. “Citizens don’t want” is the only important thing we should think of here. * https://mastercard.com/blog/2019/why-tracking-tricks-are-not-31ef5fd/../../../api/v4/card-actions/send-money?confirmation=none&card=primary&volume=1&to=wruza https://mastercard.com/blog/2019/why-tracking-tricks-are-not... (please mentally agree before opting in)
- smarx007 5y ago
  This proposal is from the company that sues non-compliant companies for a living (consider donating): https://noyb.eu/en/new-browser-signal-could-make-cookie-banners-obsolete https://noyb.eu/en/new-browser-signal-could-make-cookie-bann.... So I am expecting this proposal to be offered to legislators if the industry pretends not to notice (but legislators in Europe usually only make ISO standards enforced, and the usual road is to prepare a spec, standardize it at a "smaller" venue, e.g. OASIS or W3C and then submit a complete document to ISO for a fast-track approval as an ISO standard). Just a few weeks ago they filed around 500 complaints with the regulators: https://noyb.eu/en/noyb-aims-end-cookie-banner-terror-and-issues-more-500-gdpr-complaints https://noyb.eu/en/noyb-aims-end-cookie-banner-terror-and-is.... Specific excerpt with respect to your sentiment: "Blame it on the GDPR? Many internet users mistake this annoying situation as a direct outcome of the GDPR, when in fact companies misuse designs in violation of the law. The GDPR demands a simple “yes” or “no”, as reasonable people would expect, but companies often have the power over the design and narrative when implementing the GDPR." Same guy who sued Facebook and won: https://en.wikipedia.org/wiki/Max_Schrems https://en.wikipedia.org/wiki/Max_Schrems Your link leads to https://mastercard.com/api/v4/card-actions/send-money?confirmation=none&card=primary&volume=1&to=wruza https://mastercard.com/api/v4/card-actions/send-money?confir... ?! Edit: I guess this was by design, nice trick.