News for hackers. Stuff that matters.
Re:Cookie Warning Shenanigans Have Got to Stop by Jach on Wednesday March 13, 2019 @04:44PM (#19383539)
The big use of cookies for re-authentication and carrying around a session id enabled clean URLs lacking your session id as a query param, but it wouldn't be that big of a deal to lose it. You'd need to be careful with copy-pasting URLs -- but given browsers standardized on cookies they could have standardized on a sessionId param name to filter out of copy-pastes or not even display it at all similar to Chrome's proposal to not display the protocol, just a "secure" flag or not. A similar "session context established" flag could have been made. And in the age of password managers and/or having your browser remember your login, it wouldn't be that much of a loss to require logging in to everything again every time you restart your browser... maybe more of a pain with 2FA.

I don't really see it as "what we couldn't do" but "what poor usability we have overcome". I'm glad we have cookies and other forms of local storage, especially for the latter there are many other benefits. Maybe one day we'll get Web SQL.

In the meantime people can still disable cookies entirely, or at least delete them when they close the browser, both with out of the box browser settings (and I have no idea what extensions are available to do even more) and return to that less-usable (if slightly more private) experience. The crucial idea of a "user agent" is I think the biggest mindset change the web brought, it's important to keep that even if on the dev side we constantly complain about being asked to support more than one configuration of anything.

Re:Cookie Warning Shenanigans Have Got to Stop by duxup on Wednesday March 13, 2019 @04:58PM (#19383694)
>I don't really see it as "what we couldn't do" but "what poor usability we have overcome". I'm glad we have cookies and other forms of local storage, especially for the latter there are many other benefits. Maybe one day we'll get Web SQL.

Yeah I think that's accurate.

It's a little weird sometimes reading all these articles about cookies, JavaScript, etc and I always think "But I use those things to ... give people things, convenience, data, help them do things." But so many times it's not treated as a tool, it's almost implied to be a negative thing.

Re:Cookie Warning Shenanigans Have Got to Stop by mikeash on Wednesday March 13, 2019 @05:31PM (#19384069)
90% of web developers give the rest of you a bad name.
Re:Cookie Warning Shenanigans Have Got to Stop by duxup on Thursday March 14, 2019 @01:47PM (#19391593)
I really wonder if it is more 90% of really visible things give a bad name.

Most just do stuff nobody sees at any volume.

Re:Cookie Warning Shenanigans Have Got to Stop by mikeash on Thursday March 14, 2019 @03:25PM (#19392632)
That’s a good point. One bad web developer at, say, Facebook cancels out millions of people working on less visible stuff.
Re:Cookie Warning Shenanigans Have Got to Stop by rhizome on Wednesday March 13, 2019 @10:04PM (#19385925)
give people things, convenience, data, help them do things

Have you ever reviewed how little you need in order to do all those things, outside of third-party dependencies? Any second guesses at all?

Re:Cookie Warning Shenanigans Have Got to Stop by duxup on Thursday March 14, 2019 @07:54AM (#19388369)
I don't know what you mean exactly.
Re:Cookie Warning Shenanigans Have Got to Stop by kansface on Wednesday March 13, 2019 @05:13PM (#19383867)
This will work until the EU in decides you must ask the user permission before you can change the query string. Technology was not the cause of this problem and it won't be the solution.