News for hackers. Stuff that matters.
Re:Downgrade User Agent Client Hints to 'harmful' by thaumasiotes on Tuesday July 13, 2021 @11:59AM (#27822579)
> Set-Cookie was supposed to have the browser ask the user to confirm whether they wanted to set a cookie. Not many clients doing that today.

No worries, that's why we have laws to make the website do in the content what the browser no longer wants to do in the viewer. ;D

Re:Downgrade User Agent Client Hints to 'harmful' by notriddle on Tuesday July 13, 2021 @12:29PM (#27822986)
Having the browser explicitly prompt for cookies is neither necessary nor sufficient to do what strong, consistently-enforced privacy laws can do, because the browser can't tell a tracking cookie (which needs a prompt) apart from a settings cookie (which does not).
Re:Downgrade User Agent Client Hints to 'harmful' by dathinab on Tuesday July 13, 2021 @03:16PM (#27825003)
And the law also only requires you to ask the user if they want to be spied on.

It's not tightly bound to cookies in any way.

And vastly misunderstood.

There was a predecessor which was somehow tied to cookies but even then you didn't need to ask for setting purely functional cookies.

But somehow everyone ended up interpreting it as such.

Maybe because most sites don't have many purely functional cookies or fingerprinting, as they always track you for other purposes, too.

Re:Downgrade User Agent Client Hints to 'harmful' by notriddle on Tuesday July 13, 2021 @05:18PM (#27826448)
I’m convinced that a lot of the really annoying cookie prompts are the result of two things:

* paranoia, from small websites that are understandably worried about massive fines that could actually put their one-man-show into the poor house

* retaliation, from large websites that intentionally want to turn public sentiment against privacy laws

Re:Downgrade User Agent Client Hints to 'harmful' by shadowgovt on Tuesday July 13, 2021 @07:16PM (#27827395)
We were naive if we ever thought the end result would be otherwise.
Re:Downgrade User Agent Client Hints to 'harmful' by ajsnigrutin on Tuesday July 13, 2021 @05:03PM (#27826292)
But browsers could disable third party cookies, and autodelete first party cookies on page/tab close by default.

There would be a "keep cookies for this site" button somewhere near the address bar, and at each login, the browser would also ask you if you want to save your password and/or save cookies for that domain.

99% of websites don't require persistant storage, and those who do, 99% of them are sites you're logged into and already prompt the user, asking if they want to save the password.

Re:Downgrade User Agent Client Hints to 'harmful' by ipaddr on Tuesday July 13, 2021 @05:40PM (#27826640)
That's private browsing currently. Why not use a private window?
Re:Downgrade User Agent Client Hints to 'harmful' by ajsnigrutin on Tuesday July 13, 2021 @08:34PM (#27828013)
Because i might want cookies on this page, gmail and reddit, and nowhere else. This would mean me starting a private window, googling something, finding a link on reddit, opening it, either logging in again, or copying the link to a non-private window, commenting, closing that window, and back to search results.
Re:Downgrade User Agent Client Hints to 'harmful' by ipaddr on Wednesday July 14, 2021 @05:42PM (#27838795)
Firefox has containers tabs that does this exactly from a new tab.
Re:Downgrade User Agent Client Hints to 'harmful' by benibela on Wednesday July 14, 2021 @05:49AM (#27831273)
I often do that, but now I have to click on cookie confirmation banners all the time. It is very annoying. Might just take seconds, but it sums, eventually I have been clicking on these banners for hours

Sometimes these banners do not even work because of my NoScript

Re:Downgrade User Agent Client Hints to 'harmful' by ajsnigrutin on Wednesday July 14, 2021 @06:10AM (#27831401)
Re:Downgrade User Agent Client Hints to 'harmful' by marcosdumay on Tuesday July 13, 2021 @06:25PM (#27827009)
Because software is supposed to make our lives easier, not to insist we keep making the same choices again and again, and undo everything as soon as we make a mistake.
Re:Downgrade User Agent Client Hints to 'harmful' by lupire on Tuesday July 13, 2021 @01:38PM (#27823775)
That would be an extension or fork of Set-Cookie.
Re:Downgrade User Agent Client Hints to 'harmful' by notriddle on Tuesday July 13, 2021 @05:16PM (#27826426)
Of course a web server could report which cookies are for tracking, and which are for authentication or configuration, instead of doing it within the content.

But so what? The browser has no way to tell if it’s lying.