And it's their computer that allows the usage of cookies and localstorage. All modern web browsers has an option to disable them. It's technically stupid.
This - unless I misread it - is flat out wrong for most of the cookie warnings I see.
There's no valid reason for a news site to need cookies or similar except for logins.
It can be proved easily by wiping cookies and verifying the site still works.
Basically a fundamental misunderstanding of the difference between cookies and local storage on the part of the web developers of many sites; i.e. cookies are sent with every request, whereas localstorage isn't and these sites should be storing the option to not use cookies in the localstorage instead of cookies, and I think I'm repeating myself because I haven't had my coffee after taking a nap, but that's neither here nor there or anywhere.
That's can't be a real part of GDPR, can it? I don't see how you can fine someone for shitty website design.
If it ever starts to not benefit ycombinator, then the aite goes away.
AFAIK GDPR does explicitly legislate against all that - dialogues should be "opt-in" and should include a simple "no" option, and that sites shouldn't "ban" you for not clicking "yes".
But unless EU actually starts delivering some hefty fines, the law is just a dead tree.