News for hackers. Stuff that matters.
Re:Promoted Add-ons Pilot by bartvk on Wednesday September 09, 2020 @02:50PM (#24424373)
I really like this step, but I think this limitation is quite a shame: "You (or your company) must be based in the United States, Canada, New Zealand, Australia, the United Kingdom, Malaysia, or Singapore, because once the pilot ends, we can only accept payment from these countries"

I've got two extensions which I'm really fond of: "I don't care about cookies" (1), and its paid version "No thanks" (2). The creator, Daniel, lives in Croatia and thus they won't be able to join this program. I hope the country limitation is lifted soon.

1) https://addons.mozilla.org/en-US/firefox/addon/i-dont-care-a...

2) https://www.no-thanks-extension.com/

Re:Promoted Add-ons Pilot by Cyphase on Wednesday September 09, 2020 @05:16PM (#24425986)
That whole bullet point reads as follows:

> You (or your company) must be based in the United States, Canada, New Zealand, Australia, the United Kingdom, Malaysia, or Singapore, because once the pilot ends, we can only accept payment from these countries. (If you’re interested in participating but live outside these regions, please sign up to join the waitlist. We’re currently looking into how we can expand to more countries.)

Specifically note the last sentence.

Re:Promoted Add-ons Pilot by bartvk on Thursday September 10, 2020 @01:40AM (#24429219)
I saw that sentence about it, but accepting 7 out of more than 200 countries seems incredibly limiting to me. The bit about expansion, it seems not much more than a vague promise.
Re:Promoted Add-ons Pilot by ffpip on Wednesday September 09, 2020 @03:55PM (#24425212)
FYI, you don't need another extension for the 'Don't care about cookies'

Go to the home page and click the 'AdBlock Plus' link to add to uBlock Origin - https://www.i-dont-care-about-cookies.eu/

1 less addon with access to all sites you visit.

To remove cookie banners permanently on lesser known sites, follow this 30 second guide by the dev - https://www.youtube.com/watch?v=8TvCGWwQr5o

Re:Promoted Add-ons Pilot by ormax3 on Thursday September 10, 2020 @04:12AM (#24430040)
uBO alreay has a list to remove cookie banners, it's listed under "annoyances": (EasyList Cookie)

it's not enabled by default

Re:Promoted Add-ons Pilot by Forbo on Wednesday September 09, 2020 @06:49PM (#24426809)
I had no idea about the blocklist approach, thanks for bringing this up!
Re:Promoted Add-ons Pilot by lukaa on Wednesday September 09, 2020 @04:02PM (#24425291)
Yes, this addon looks like repackaging and selling someone others open source work. I'm really not sorry for that author.
Re:Promoted Add-ons Pilot by kiboke on Thursday September 10, 2020 @02:29AM (#24429489)
I'm the author.

I maintain both the "I don't care about cookies" and the premium "No, thanks" extension and the filter list. All by myself, for the last 8-9 years. Please don't write stuff you didn't recheck first.

While the list is a cool addition for those who can't install the extension, it really can't do much when cookie policy needs to be accepted for the website to work properly. The extension accepts policies automatically when it's needed.

Cheers, Daniel

Re:Promoted Add-ons Pilot by nicbou on Thursday September 10, 2020 @06:32AM (#24430885)
I love your extension Daniel. Installing Firefox Mobile, then this was a revelation. Unfortunately, it was killed by the Firefox update two weeks later.
Re:Promoted Add-ons Pilot by kiboke on Sunday September 13, 2020 @02:25AM (#24458837)
They'll fix that. I think they realized they will lose so many users without extension support.
Re:Promoted Add-ons Pilot by lukaa on Thursday September 10, 2020 @06:53PM (#24437402)
I confused names of uBlock lists and functionality with your extension. I sincerely apologize.
Re:Promoted Add-ons Pilot by kiboke on Sunday September 13, 2020 @02:26AM (#24458845)
Apology accepted :)
Re:Promoted Add-ons Pilot by ffpip on Wednesday September 09, 2020 @04:05PM (#24425317)
It has some extra features. i don't think it is a repackage.

You can do those with uBlock Origin, but users don't want to mess with extensions and want extensions to work out of the box, so they install many extensions leading to malware and privacy issues.

Re:Promoted Add-ons Pilot by bartvk on Wednesday September 09, 2020 @04:15PM (#24425409)
That's a pretty hefty statement that really needs more than just you thinking so, in my opinion.
Re:Promoted Add-ons Pilot by lukaa on Wednesday September 09, 2020 @04:24PM (#24425526)
That's why I said ''It looks like'' not ''It is''. When you have Ublock this really looks unnecessary.
Re:Promoted Add-ons Pilot by ufedvjot13467 on Wednesday September 09, 2020 @06:27PM (#24426621)
Ublock is the one that was swiped from the original creator's hands under the guise of maintenance support while the original creator's time was scarce.

Ublock origin is the one to use, and is maintained by the original creator.

I'd link to sources, but it's too easy for me to cherry pick... I'd recommend looking around to see if what you find corroborates with what I've stated.

Re:Promoted Add-ons Pilot by bartvk on Thursday September 10, 2020 @01:41AM (#24429223)
Maybe, but you'd certainly have to put in a lot of time into getting it right.
Re:Promoted Add-ons Pilot by gnicholas on Wednesday September 09, 2020 @04:24PM (#24425524)
Well, the pilot program will only include 12 addons, so it's highly unlikely that any individual creator will actually get into the pilot.
Re:Promoted Add-ons Pilot by feanaro on Wednesday September 09, 2020 @04:10PM (#24425364)
A bit of a tangent, but I noticed the developer says this on the website:

> By using it, you explicitly allow websites to do whatever they want with cookies they set on your computer (which they mostly do anyway, whether you allow them or not).

Taking GDPR into account, this seems wrong, since GDPR enforces opt-in, not opt-out. Therefore, a notification only gives you an opportunity to opt in and blocking the notification should leave the website with no permissions.

Re:Promoted Add-ons Pilot by Macha on Wednesday September 09, 2020 @07:44PM (#24427286)
I think this is less about what websites are legally allowed to do and more about what websites actually do. I think a lot of these websites are not compliant with GDPR, but DPAs have been pretty timid so far in enforcing it.
Re:Promoted Add-ons Pilot by ffpip on Wednesday September 09, 2020 @04:13PM (#24425391)
GDPR enforces opt in if you read the banner. Not if you hide it.

Sites like Facebook and Ghacks automatically opt you in if you start scrolling down, because they said they would do this in the banner they show. You didn't read it, because you were blocking it with the extension.

The dev is just trying to save himself from silly lawsuits.

Re:Promoted Add-ons Pilot by PeterisP on Wednesday September 09, 2020 @05:14PM (#24425978)
The only thing that a banner "by scrolling down you opt in to something" means according to GDPR is that the people who wrote that banner are liars.

Quoting GDPR definitions (Art 4.12), '‘consent’ of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes [..]'.

If the site owner wants to assert that the user provided consent, it's up to them to demonstrate that they fulfilled all these criteria. If they assert that a particular action (e.g. scrolling in this case) indicates consent, then they have the burden of proof to convince the regulator or the court that the action was unambiguous, that it's clear that reasonable people would only take that action with the intent to opt-in, and not because of some unrelated reason such as wanting to read the content below. The legality of various opt-in 'dark patterns' has been tested in EU courts already before GDPR, and it's not considered legally valid if it systematically misrepresents the actual user intent and wishes.

The appropriateness of any technical measure can be trivially tested with a user survey - get 100 random people to use the site for 5 minutes, and after the "opt in" action is completed, ask them whether they know that they "opted in", whether they know to what they opted in, and whether they really intended to opt in or not - and if not, then your method for "collecting consent" does not work and the things you recorded - actions, clicks, even physical signatures in a 'meatspace' setting - do not give you any legal permission whatsoever, they're meaningless.

The one thing they can do with that banner and scrolling is to cover their information requirements, where they have the right to do some thing even if the user disagrees (much less opts in), but they are required to notify the users that they are doing that thing. But there it makes all sense that the user can choose to delete that banner if they want to, it's like the notifications in supermarkets that they have cameras - they're required to display them, but the users don't need to read them if they don't care.

Re:Promoted Add-ons Pilot by tgsovlerkhgsel on Wednesday September 09, 2020 @06:53PM (#24426842)
I really hope that courts start striking down the various non-compliant banners and DPAs are secretly making a list and will start fining the shit out of them.

The law is pretty clear, nobody should be surprised that their banners are non-compliant.

Re:Promoted Add-ons Pilot by ffpip on Thursday September 10, 2020 @12:03AM (#24428779)
I'm not saying it's a good way to do this. But they clearly state so. 'By scrolling, you are agreeing to use of cookies for marketing ' .

They give you a good,easy way to opt out too.

Re:Promoted Add-ons Pilot by PeterisP on Thursday September 10, 2020 @11:56AM (#24433488)
A good way to do what? Clearly stating something does not make it true, because, to make it really clear, by reading this you definitely agree that you owe me $100.

The GDPR approach is that processing personal data by companies is prohibited by default, unless they can point out one of the specific GDPR subsections that permits that particular purpose of processing. They are not allowed to use my personal data for marketing unless specific conditions are met. Scrolling past a statement 'By scrolling, you are agreeing to use of cookies for marketing' does not meet these specific conditions, no matter how clearly its said, so the banner legally makes no difference whatsoever, it does not mean that I'm agreeing to anything, it's exactly as if it wasn't there, and that clear statement is simply a lie.

And the "good,easy way to opt out" does not matter, after the opt-out it's just as illegal for them to use data as before the opt-out, since I did not opt-in. If they're using my data without an intentional opt-in, then they're untrustworthy cheaters anyway, there's no reason to try to opt-out of something that I didn't opt-in to, this should be handled by the regulator who will be able to audit them to verify if they have actually stopped using the data.

Furthermore, if had opted in, the legal requirement (Article 7.3) is "It shall be as easy to withdraw as to give consent." So if opting in happens on the main page by scrolling but opting out happens in a settings menu requiring two clicks, then that may be good but it's not good enough, because it's not as easy as it was to opt in.

Re:Promoted Add-ons Pilot by Macha on Thursday September 10, 2020 @11:07AM (#24433009)
https://ico.org.uk/for-organisations/guide-to-data-protectio...

> You may not rely on silence, inactivity, default settings, pre-ticked boxes or your general terms and conditions, or seek to take advantage of inertia, inattention or default bias in any other way. All of these methods also involve ambiguity – and for consent to be valid it must be both unambiguous and affirmative. It must be clear that the individual deliberately and actively chose to consent

Re:Promoted Add-ons Pilot by feanaro on Wednesday September 09, 2020 @04:40PM (#24425682)
> GDPR enforces opt in if you read the banner. Not if you hide it.

Do you have a source on this? I'm pretty certain this right is not dependent on reading the banner nor even the existence of a banner.

Re:Promoted Add-ons Pilot by leecb on Wednesday September 09, 2020 @03:42PM (#24425041)
Perhaps users in one of the accepted countries might be willing to pay for the review as a way of supporting the plugin? I definitely would be willing to contribute (directly / indirectly) to support review of plugins that I use.