News for hackers. Stuff that matters.
Re:Only 9% of visitors give GDPR consent to be tracked by beshrkayali on Tuesday July 07, 2020 @08:58AM (#23758704)
DockerHub uses a company/product called "TrustArc: TRUSTe" and they have _exactly_ this method. The slowdown is intentional. People who come up with sort of tactics and those who implement them should go to jail. It's beyond infuriating. I've decided to not upload my images to dockerhub because of this.

Edit: jail time is not for anger obviously, but for intentionally swindling people. It'll be handled on a case by case bases obviously, but data is worth something, people who swindle you out of your data are like those who scam you in the street for your wallet, and as far as I know, there's jail time for that.

Re:Only 9% of visitors give GDPR consent to be tracked by sebazzz on Tuesday July 07, 2020 @10:59AM (#23759933)
> The slowdown is intentional.

Yes, it appears to be. If you check the network tab of your browser, you see it makes about 8 requests. Then it waits for about 5-10 seconds and makes again 5 requests.

Re:Only 9% of visitors give GDPR consent to be tracked by blauditore on Wednesday July 08, 2020 @06:08AM (#23768489)
I think there should be some sort of public shaming for shady practices like this, so large companies like Oracle would seriously consider alternatives.
Re:Only 9% of visitors give GDPR consent to be tracked by wutbrodo on Tuesday July 07, 2020 @11:57AM (#23760523)
Since your edit seems to be taking the jail suggestion seriously:

I think the data-money analogy isn't unreasonable, but you're overloading "swindle" pretty heavily here, in a way that defeats your point. Companies and people "swindle" others out of money all the time with dark patterns, and this predates computing by ten thousand years. Caveat emptor exists for a reason: the legal system is just too inflexible a tool to cram a person's view of "honesty in business" into.

Defining "making one side of an option an iota more of a hassle than the other" as criminal is broad enough that you're pretty much guaranteed to catch many honest transactors too. The law is a really blunt instrument.

Re:Only 9% of visitors give GDPR consent to be tracked by beshrkayali on Tuesday July 07, 2020 @12:51PM (#23761098)
I agree. I’m certainly taking it from my own point of view, and I might be overloading “swindle”. It’s probably a bad choice of a word here. It would have to be on case by case basis anyway, but even with the inflexibility of the system and the impossibility of jail time for every theft case, I think it would have to be at least an option when the intent on scamming for the purpose of selling the data (like those mailing lists) is clear.
Re:Only 9% of visitors give GDPR consent to be tracked by baddox on Tuesday July 07, 2020 @12:30PM (#23760851)
There are certain patterns that are illegal though, and presumably have legal penalties (maybe not jail time, but presumably at least fines). False advertising is the obvious example. I don’t think it’s unreasonable to support strengthening the laws around these things.
Re:Only 9% of visitors give GDPR consent to be tracked by t-writescode on Tuesday July 07, 2020 @09:58PM (#23766217)
I’m not a lawyer.

If memory serves me, the EU does not Operate on the same legal framework as the US, so the assumptions I hear here: that the exact letter of the law they’re suggesting is worrying, is not How it works in the EU. They also don’t use case law to define exactly how something will be dealt with.

It’s a lot more fluid and ‘spirit of the law’y there.

I think.

Re:Only 9% of visitors give GDPR consent to be tracked by dimitrios1 on Tuesday July 07, 2020 @09:16AM (#23758874)
Causing you to get angry is all it takes to warrant justification for jail time in your eyes? I am thankful you aren't in charge of any lawmaking.
Re:Only 9% of visitors give GDPR consent to be tracked by z_open on Tuesday July 07, 2020 @09:33AM (#23759042)
It seemed very clear to me from his comment that his justification didn't revolve around him getting angry personally, but the harm these features cause over time. With that being said, your post seems disingenuous. I personally don't believe in jail time for this, but very heavy fines certainly. People need to care about these issues.
Re:Only 9% of visitors give GDPR consent to be tracked by ocdtrekkie on Tuesday July 07, 2020 @11:49AM (#23760431)
Jail time is probably the only suitable enough deterrent for adtech nightmares. Fines are just treated as a cost of doing business expense, and doesn't directly even hurt the terrible people making these decisions.

When someone commits a wrong, the punishment is in part based on the amount of harm. You might feel that adtech causes small harms, if you look at harm against an individual, but adtech folks harm billions of people, every single day.

If you're Mark Zuckerberg, Larry Page, or Sergey Brin, no fine is large enough to make you regret your life choices. The only way to punish billionaires who get rich off harming others is to take away their time/freedom, the one thing they can't just buy back. As long as corporate CEOs can't get jailed, crime absolutely pays in this country.

Re:Only 9% of visitors give GDPR consent to be tracked by ViViDboarder on Tuesday July 07, 2020 @12:02PM (#23760568)
Exactly. Facebook and Google have been fined in the past and it’s never amounted to anything for them. When they make more Money from engaging in bad behavior than the fine costs, it’s a law they’d be stupid not to break.
Re:Only 9% of visitors give GDPR consent to be tracked by jjeaff on Tuesday July 07, 2020 @07:44PM (#23765543)
Then make the fines double what they made from it.
Re:Only 9% of visitors give GDPR consent to be tracked by jjeaff on Tuesday July 07, 2020 @07:43PM (#23765540)
No amount of fines would make a difference? I beg to differ. Make the fines high enough, bill them to the executives personally, I guarantee it will make a difference.

A large enough fine could literally take the company and thus their power away from them. A large enough fine could literally bankrupt the company.

The problem is simply that the fines aren't big enough.

Re:Only 9% of visitors give GDPR consent to be tracked by devdas on Wednesday July 08, 2020 @03:18AM (#23767673)
That just means you need fines proportionate to wealth, not fixed numbers.

A truly useful penalty would be to forbid them from owning any capital (directly, or indirectly like via a trust or index funds).

Re:Only 9% of visitors give GDPR consent to be tracked by drstewart on Tuesday July 07, 2020 @12:08PM (#23760628)
Most studies pretty clearly show that harsher punishments are not an effective deterrent.
Re:Only 9% of visitors give GDPR consent to be tracked by ocdtrekkie on Tuesday July 07, 2020 @01:09PM (#23761363)
So the alternative is... we don't punish them at all? Bear in mind, CEOs face no real penalty for criminal activity.
Re:Only 9% of visitors give GDPR consent to be tracked by takeda on Tuesday July 07, 2020 @02:24PM (#23762372)
This refers to the "normal" people not businesses or rich execs. Giving them for example 20 years instead of 5 doesn't change much, because 5 is already a lot. If someone does crime, because of poverty, being mentally ill, or because of addiction no jail time will be a strong enough deterrent.

If businesses actually would have fines that significantly hurt the business (and not being able to deduct it from taxes, if they were unable to pay, they would have to close down) would absolutely help and would change the calculation from fine being a cost of doing the business to a punishment for illegal behavior.

Having executives be personally responsible for decisions and go to a real jail would be even a stronger motivator.

The current problem is that there's no real deterrent.

Re:Only 9% of visitors give GDPR consent to be tracked by ogre_codes on Tuesday July 07, 2020 @01:57PM (#23762059)
> Most studies pretty clearly show that harsher punishments are not an effective deterrent.

It doesn't need to be harsh, 3 days in jail with a review in six months to see if they've fixed it. Then an additional 3 days in jail. Pretty much any jail time would be adequate for typical C-Level execs. Also, not "Raped in the ass" prison time, just a mellow 3 days to contemplate their shiftiness locked in a comfortable room.

Re:Only 9% of visitors give GDPR consent to be tracked by bitlevel on Tuesday July 07, 2020 @12:20PM (#23760748)
That may be, but a threat of jail hanging over a director or CEO may make them take the correct course of action - effectively becoming the deterrent.
Re:Only 9% of visitors give GDPR consent to be tracked by drstewart on Tuesday July 07, 2020 @01:02PM (#23761261)
Re:Only 9% of visitors give GDPR consent to be tracked by ocdtrekkie on Tuesday July 07, 2020 @01:19PM (#23761505)
Your source doesn't actually apply well here. It talks about things like substance abuse and addiction being reasons that criminals don't act rationally to punishment as a deterrent. For white collar crime, there's a very different set of circumstances in play. Crime is often just a business decision based on risk and reward. Raise the risk and the reward becomes less worth going for.
Re:Only 9% of visitors give GDPR consent to be tracked by mszcz on Tuesday July 07, 2020 @09:26AM (#23758972)
This should be punishible by law, jailtime included. The intent of the law is to give the consumer a choice. What these companies are doing are trying to circumvent the law by making it extremely difficult and annoying to exercise that choice.

Very similar to trying to cancel a spammy subscription (but that's not mandated by law, so)

Re:Only 9% of visitors give GDPR consent to be tracked by tobr on Tuesday July 07, 2020 @09:34AM (#23759052)
No, hurting others and breaking the law justifies jail time and causes anger.
Re:Only 9% of visitors give GDPR consent to be tracked by EamonnMR on Tuesday July 07, 2020 @10:10AM (#23759448)
I wonder if justice has improved over time because we've gotten better at tolerating things that make us angry, or because we've gotten better at not getting angry.
Re:Only 9% of visitors give GDPR consent to be tracked by c3534l on Tuesday July 07, 2020 @10:15AM (#23759491)
I'm guessing its more about knowingly and intentionally breaking the law bit, then that he was angry they were breaking the law.
Re:Only 9% of visitors give GDPR consent to be tracked by this_was_posted on Tuesday July 07, 2020 @09:25AM (#23758965)
Jail might be a bit much, but giving them the maximum fine allowed under the GDPR seems quite reasonable to me. I'd even go so far as to try and transfer the debt to the individuals responsible if this causes the company to go bankrupt, as this is clearly malpractice.
Re:Only 9% of visitors give GDPR consent to be tracked by oarsinsync on Tuesday July 07, 2020 @09:57AM (#23759317)
> I'd even go so far as to try and transfer the debt to the individuals responsible if this causes the company to go bankrupt

So who's liable in this scenario? Someone in the C suite? The coder monkey who implemented it? Someone in between? All of the above?

Unless I'm mis-remembering, the maximum fine under GDPR is a % of the total revenue of the company, so depending on the size of the company, this could result in bankruptcy of any individuals deemed responsible too.

Re:Only 9% of visitors give GDPR consent to be tracked by ginko on Tuesday July 07, 2020 @09:59AM (#23759335)
I'd say the stock owners.
Re:Only 9% of visitors give GDPR consent to be tracked by oarsinsync on Tuesday July 07, 2020 @10:09AM (#23759433)
If the risk of investing is goes from (Value of your investment can drop to zero) and is now (Your entire personal fortune is at risk), what do you think is the outcome? Thinking 1 month, 6 months, 12 months, 5 years.

Or to put it another way, is causing another massive economic shock the correct response to a dark patterns on websites?

Re:Only 9% of visitors give GDPR consent to be tracked by dddeeerrr9999 on Tuesday July 07, 2020 @11:35AM (#23760289)
The stock market is not the economy. All you are ultimately advocating for is keeping the exiting corrupt corporate leadership in charge and preventing market forces from replacing them with ethical leaders.
Re:Only 9% of visitors give GDPR consent to be tracked by munk-a on Tuesday July 07, 2020 @12:19PM (#23760730)
When you give someone money to do a thing you have responsibility about that thing. If someone is running a clearly illegal business (trafficing illegal drugs, humans) and you are aware of this and invest in their business then you become an accessory you are not immune to liability for crimes you were aware of before investing - you are immune to liability for actions taken without your knowledge (which is what we assume the great deal of actions taken by investees are).

Causing another massive shock to the stock market is the correct response here because nearly everyone is engaged in behavior that harms society and should be stopped. Also, the market will recover and really isn't that important. If a small proportion of actors were engaged in this activity then getting an industry compact or other token gesture might be good enough to correct it.

Re:Only 9% of visitors give GDPR consent to be tracked by Swizec on Tuesday July 07, 2020 @11:42AM (#23760363)
So pension funds? That smells dangerous
Re:Only 9% of visitors give GDPR consent to be tracked by vorpalhex on Tuesday July 07, 2020 @10:41AM (#23759747)
So pension funds and teacher's unions? Grandpa's nest egg?
Re:Only 9% of visitors give GDPR consent to be tracked by vertex-four on Tuesday July 07, 2020 @11:22AM (#23760155)
If people were affected by the things they give companies money to do, perhaps they'd be a lot more careful about what they give companies money to do.
Re:Only 9% of visitors give GDPR consent to be tracked by freeone3000 on Tuesday July 07, 2020 @11:43AM (#23760379)
To the point where it's not worth giving companies money at all. Stockholders aren't involved in day-to-day ops, anyway, so you're placing the blame at the wrong place. It should be placed on the C-suite.
Re:Only 9% of visitors give GDPR consent to be tracked by iso1631 on Tuesday July 07, 2020 @12:19PM (#23760743)
The problem with modern capitalism is that people can get all the benefits but avoid the bulk of the risk
Re:Only 9% of visitors give GDPR consent to be tracked by vorpalhex on Tuesday July 07, 2020 @12:44PM (#23761003)
The alternative seems like a strange land where we imprison waste management workers for their pension funds being invested in companies they have literally have no control over and no ability to discover the behavior of.

Or should we restrict the stock market only to the rich and powerful?

Re:Only 9% of visitors give GDPR consent to be tracked by flattone on Tuesday July 07, 2020 @09:50AM (#23759227)
I mean... how much of the world do you want to feel like you married a sociopath (aka people who deliberately make the better option miserable), before someone can say 'lets disincentivise this behavior
Re:Only 9% of visitors give GDPR consent to be tracked by dsabanin on Tuesday July 07, 2020 @09:01AM (#23758725)
Why jail? I think we should just execute them on the spot. /s
Re:Only 9% of visitors give GDPR consent to be tracked by strbean on Tuesday July 07, 2020 @02:48PM (#23762663)
Just like we do in the USA for the crime of 'suspicion of selling loose cigarettes'!