XSF Discussion - 2022-07-14

those are extra annoying when your browser already deletes cookies anyway

moparisthebest: hate to be that guy but cookie consent forms have nothing to do with GDPR

haha yea I know, someone had to say it

singpolyma: is there one that automatically selects minimal cookies?

Or do you just have opt in cookie retention at browser level

qy: consent-o-matic lets you pick level IIRC

Neat. Shame i use qutebrowser anyway

> don't you get GDPR'd everytime you deal with a cookie consent form ? well after all, all GDPR does is annoying people ✏

> jcbrand wrote: > moparisthebest: hate to be that guy but cookie consent forms have nothing to do with GDPR Which law was that then?

> moparisthebest: hate to be that guy but cookie consent forms have nothing to do with GDPR Also ditto

qy, GDPR just talks about making it clear how user data is treated and give ways to opt out, retrieve the collected and/or erase the data. Saying "cookie consent" is mandatory is just some bs made by GDPR consulting firms to earn their due.

it's the EU ePrivacy Directive, but the real reason is not the law, the real reason is that website operators got caught with both hands deep in the PII cookie jar, and now are trying their worst at blame-shifting

Lol, EUPD

Users have multiple ways to opt out from cookies already, so having that banner is just some constructed hoax, all that stands is the other 2 points which can be really handled OOB.

(which might definitely be a problem for those operators handling very large traffic)

Maranda[x]: multiple ways, none of which are easily found, or as granular. The solution is to stop tracking users

I hate cookie banners as much as anyone, but what they say is that the website wants to track me more than anything

mathieui, really? "In-Private browsing" is hard to find? "Deleting cookies on exit" is hard to find? "Clear cookies of the last hour" is hard to find...? 🤔️

Interesting assertion

Maranda[x]: but I want *some* cookies, and the banner is about storing them at all, not deleting them

deleting cookies of the visited site is hard to find...?

"We value your privacy" means that your PII has a price tag

https://upload.lightwitch.org/share/YkmGuDUZWpEI1553/8909dd70-9400-406c-afab-0be0fc20a211.png

🤔️

As I said opt out is a hoax, problem might be the collected data/metadata server side ✏

mathieui, by law you can't coherce the implementation of something for UX. You just need to viably give ways and/or to be compliant to the law objective. For example if the normative says you need to change passwords at least once a year to be compliant all you need to do is change 'em manually without having an actual expiration implementation in place.

Cookie in Ouzo? Worth a try. 🙂

And you'd still *be compliant*

Really keen to just have cookies off for every site i don't login to in any way

They've no business fiddling my cookie jar

Most "privacy" stuff is like this. Let's make sure everyone knows the blog they visit once a year might remember them when they come back. But neglect to remind them that they carry a homing device that broadcasts their current location to half a dozen parties at all times

If they wanted to stop online tracking they'd ban that. Instead they want to *look* like the want to stop tracking while continuing to allow it, so they ban *checks notes* merkle trees and backups containing logfiles

The eu should've mandated that the browser itself explicitly asks if you want to store cookies for this specific site or not. They would've if they actually cared about privacy-/understood shit. They would also limit page size, especially the js part. Forbid obfuscation.

Proprietary software should be banned as a whole of course. But websites are the best place to start. Because they are the most cancerous and annoying proprietary software there is.

At least the cookie regulations work. Google recently started showing a "Reject All" button rather than only letting you choose "Accept All" like the case before.

Of course these big tech companies make these consent banners annoying to generate backlash against the cookie regulation.

robertooo: cookie regulation was followed by litigation. https://www.theverge.com/2022/4/21/23035289/google-reject-all-cookie-button-eu-privacy-data-laws