News for hackers. Stuff that matters.

A comment on Lapsus$ and SolarWinds hackers both use the same old trick to bypass MFA. Parent comment

Re:Lapsus$ and SolarWinds hackers both use the same old tric... by vba616 on Wednesday March 30, 2022 @09:09PM (#30862746)
>This is also why basically all GDPR consent trackers are "accidentally" so forgetful about your choice not to consent

They're perfectly entitled to track you as long as you don't opt out.

And when you opt out, they can't be held responsible for remembering it for even an instant, because they can't identify you.

"That's some catch, that Catch-22"

[ Parent | on HN ]
Re:Lapsus$ and SolarWinds hackers both use the same old tric... by brendoelfrendo on Wednesday March 30, 2022 @09:13PM (#30862777)
Yeah, one website I visited recently helpfully showed me the cookies that it would save if I accepted their cookie agreement. The first one on the list was the cookie to remember my response to their cookie agreement.
[ Parent | on HN ]
Re:Lapsus$ and SolarWinds hackers both use the same old tric... by distances on Thursday March 31, 2022 @03:23AM (#30864705)
This also makes the cookie prompts a pain for users who don't use cookies. My browser rejects all cookies by default, so I end up creating uBlock filter rules for the prompts on sites I frequently visit.
[ Parent | on HN ]
Re:Lapsus$ and SolarWinds hackers both use the same old tric... by orlp on Thursday March 31, 2022 @04:21AM (#30865000)
> They're perfectly entitled to track you as long as you don't opt out.

This is false, GDPR is opt-in.

[ Parent | on HN ]
Re:Lapsus$ and SolarWinds hackers both use the same old tric... by vba616 on Thursday March 31, 2022 @09:14PM (#30874156)
Irrelephant.

Since you didn't opt in, you haven't allowed them to track you, and they can't remember that you didn't opt in without tracking you.

See?

[ Parent | on HN ]
Re:Lapsus$ and SolarWinds hackers both use the same old tric... by solarkraft on Thursday March 31, 2022 @10:14AM (#30867435)
> They're perfectly entitled to track you as long as you don't opt out.

Um ... huh? GDPR requires explicit consent.

[ Parent | on HN ]