3 ms·

We could have deleted any LinkedIn Post

28 points by Paul-Craft 4y ago

deleted 4y ago
[deleted]
TheJoeMan 4y ago
I’m curious about the motivation behind the site’s cookie banner. The only button is “accept” for me on mobile. If I scrolled the site and didn’t close the banner does it still log? It’s certainly not GPDR compliant.
- justsomehnguy 4y ago
  F12, Network: GET https://forms.hsforms.com/embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=2 GET https://api.hubapi.com/hs-script-loader-public/v1/config/pixels-and-events/json?portalId=22107538 GET https://forms.hscollectedforms.net/collected-forms/v1/config/json?portalId=22107538&utk= GET https://js.hs-banner.com/v2/22107538/banner.js GET https://js.hs-scripts.com/22107538.js GET https://www.googletagmanager.com/gtm.js?id=GTM-KZQLQKG GET https://snap.licdn.com/li.lms-analytics/insight.min.js GET https://js.hs-analytics.net/analytics/1681998000000/22107538.js Only the last three were blocked by default Firefox anti-tracking protection GET https://cdn.jsdelivr.net/npm/@finsweet/cookie-consent@1/fs-cc.js ETag W/"6e44-6QFWM2OT7puhIxEFAaT+kz8i7w4" NEL {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Report-To {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gtW7D1wJQ0gDhimitsu3oCKg5LuvTf8M%3D"}],"group":"cf-nel","max_age":604800} Is NEL GDPR compliant? And some useless trivia, if you visit Wordpress.com site by the IP (192.0.78.144, 192.0.78.228) you would get the response: GET http://192.0.78.144/ Status 302 Found Location http://wordpress.com/typo/?subdomain=192
- thomond 4y ago
  Seems they've changed it? as I'm getting a banner with "decline"
- throwaway67743 4y ago
  None of them are, but yes the accept only ones are definitely a violation - not because of the lack of reject but because they don't indicate whether cookies are set or not if you ignore it, regulation requires the user be informed so that falls foul in the spirit of the law which IMO is the same thing as the letter but the EU don't care anyway really, like most stuff it's fire and forget
- Gigachad 4y ago
  Sort of a tangent, but I think it's amusing how often HN goes on about how the laws are too complex but the situation is something like EU: Stop abusing the users Tech company: But I want to continue abusing the users, how do I do that while still being compliant?? This is so complex.
- kiwijamo 4y ago
  I stopped reading this article because of this.
jsnell 4y ago
> "Issue was disclosed on April 11th, 2023 & was fixed earlier" "Earlier" feels like an understatement, IIUC it was reported and fixed in 2018.
exolymph 4y ago
What a missed opportunity, shoulda deleted them all!

28 points by Paul-Craft 4y ago

deleted 4y ago

[deleted]

I’m curious about the motivation behind the site’s cookie banner. The only button is “accept” for me on mobile. If I scrolled the site and didn’t close the banner does it still log? It’s certainly not GPDR compliant.

justsomehnguy 4y ago
F12, Network: GET https://forms.hsforms.com/embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=2 GET https://api.hubapi.com/hs-script-loader-public/v1/config/pixels-and-events/json?portalId=22107538 GET https://forms.hscollectedforms.net/collected-forms/v1/config/json?portalId=22107538&utk= GET https://js.hs-banner.com/v2/22107538/banner.js GET https://js.hs-scripts.com/22107538.js GET https://www.googletagmanager.com/gtm.js?id=GTM-KZQLQKG GET https://snap.licdn.com/li.lms-analytics/insight.min.js GET https://js.hs-analytics.net/analytics/1681998000000/22107538.js Only the last three were blocked by default Firefox anti-tracking protection GET https://cdn.jsdelivr.net/npm/@finsweet/cookie-consent@1/fs-cc.js ETag W/"6e44-6QFWM2OT7puhIxEFAaT+kz8i7w4" NEL {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Report-To {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gtW7D1wJQ0gDhimitsu3oCKg5LuvTf8M%3D"}],"group":"cf-nel","max_age":604800} Is NEL GDPR compliant? And some useless trivia, if you visit Wordpress.com site by the IP (192.0.78.144, 192.0.78.228) you would get the response: GET http://192.0.78.144/ Status 302 Found Location http://wordpress.com/typo/?subdomain=192
thomond 4y ago
Seems they've changed it? as I'm getting a banner with "decline"
throwaway67743 4y ago
None of them are, but yes the accept only ones are definitely a violation - not because of the lack of reject but because they don't indicate whether cookies are set or not if you ignore it, regulation requires the user be informed so that falls foul in the spirit of the law which IMO is the same thing as the letter but the EU don't care anyway really, like most stuff it's fire and forget
Gigachad 4y ago
Sort of a tangent, but I think it's amusing how often HN goes on about how the laws are too complex but the situation is something like EU: Stop abusing the users Tech company: But I want to continue abusing the users, how do I do that while still being compliant?? This is so complex.
kiwijamo 4y ago
I stopped reading this article because of this.

jsnell 4y ago

> "Issue was disclosed on April 11th, 2023 & was fixed earlier" "Earlier" feels like an understatement, IIUC it was reported and fixed in 2018.

exolymph 4y ago

What a missed opportunity, shoulda deleted them all!