News for hackers. Stuff that matters.

A comment on UK to depart from GDPR. Parent comment

Re:UK to depart from GDPR by dheera on Friday March 12, 2021 @12:04PM (#26437937)
It feels good to not agree successfully in the lack of a "I don't agree" button. I block their cookies anyway. :) I need to find better ways to mess with their fingerprinting though, or maybe throw back some bogus cookies at them with badly-formatted data instead of blocking them.
[ Parent | on HN ]
Re:UK to depart from GDPR by pasabagi on Friday March 12, 2021 @02:35PM (#26439924)
Is this something people do? Is it possible for a user to edit a cookie in a malicious way? Do servers typically trust cookies they have placed on a user's machine?
[ Parent | on HN ]
Re:UK to depart from GDPR by ric2b on Sunday March 14, 2021 @04:40PM (#26458919)
> Is it possible for a user to edit a cookie in a malicious way?

Obviously, it comes from the user's machine so it can be modified before being sent to the server. Unless you're doing something custom/fancy like signing that data you shouldn't trust that it hasn't been tampered with.

[ Parent | on HN ]