News for hackers. Stuff that matters.
Re:New York Times phasing out all 3rd-party advertising data by troydavis on Tuesday May 19, 2020 @02:08PM (#23238068)
> 3. They could still use data gathered from sites affiliated with NYT using NYT trackers, if that's something NYT does. No idea if NYT does it.

NYT seems to do this with sites they own like The Wirecutter. Even privacy preferences are controlled by shared infrastructure. For example, thewirecutter.com uses https://purr.nytimes.com/v1/directives, which serves this JSON. Presumably the values depend on which regulations you're covered by:

  {
    "PURR_AcceptableTrackers":
      {"value":"controllers"},
    "PURR_AcceptableTrackers_v2":
      {"value":"processors"},
    "PURR_AdConfiguration":
      {"value":"full"},
    "PURR_AdConfiguration_v2":
      {"value":"rdp"},
    "PURR_CaliforniaNoticesUI":
      {"value":"hide"},
    "PURR_DataProcessingConsentUI":
      {"value":"hide"},
    "PURR_DataProcessingPreferenceUI":
      {"value":"hide"},
    "PURR_DataSaleOptOutUI":
      {"value":"hide"},
    "PURR_DataSaleOptOutUI_v2":
      {"value":"hide"},
    "PURR_EmailMarketingOptInUI":
      {"value":"checked"}
  }
Re:New York Times phasing out all 3rd-party advertising data by munchbunny on Tuesday May 19, 2020 @03:06PM (#23238796)
Thanks for sharing. It’s interesting to see how they’re implementing it.

From the perspective of GDPR at least, I’m pretty sure NYT and its owned sites count as one controller/processor, and I think passes the sniff test for case #2 rather than case #3.