News for hackers. Stuff that matters.
Re:Easter egg in flight path of last 747 delivery flight by aendruk on Wednesday February 01, 2023 @05:04PM (#34618580)
Screenshot: https://cloudflare-ipfs.com/ipfs/QmcjrYXR934QZqBuMHioRdcZEmo...

On small displays this is otherwise obstructed by a cookie popup that offers only an “accept all” button. What’s even the point of the popup then?

Re:Easter egg in flight path of last 747 delivery flight by lostlogin on Wednesday February 01, 2023 @05:47PM (#34619141)
Thank you, I couldn’t see the interesting part due to zoom/number of other planes etc.
Re:Easter egg in flight path of last 747 delivery flight by knodi123 on Wednesday February 01, 2023 @05:56PM (#34619261)
> What’s even the point of the popup then?

Complying with idiotic bureaucratic regulations. Nobody wants to be popping that thing up, but if they don't, they can get reamed by the EU.

Re:Easter egg in flight path of last 747 delivery flight by AlexandrB on Wednesday February 01, 2023 @06:10PM (#34619455)
They could just... not use tracking cookies. Then no banner is required. The real idiocy is every website wanting to hoover up data.
Re:Easter egg in flight path of last 747 delivery flight by gtirloni on Wednesday February 01, 2023 @08:36PM (#34620881)
The popup is about any cookies, right?

Cookies are a basic building blocks of websites. If you login to a legit website, there's a cookie in your browser for that.

Re:Easter egg in flight path of last 747 delivery flight by dspillett on Wednesday February 01, 2023 @09:07PM (#34621131)
> The popup is about any cookies, right?

The popup is, yes. But the legislation they are pretending to be compliant with isn't.

For basic session-level cookies that are essential to the operation of some sites, no legislation requires consent. The issues are third party tracking, long term use stalking, etc. But those that want to stalk you want you to believe that the legislation is against even session maintenance & similar cookies as well so you'll be against the legislation and not them. And that is apparently working on you and some others commenting in this thread.

Re:Easter egg in flight path of last 747 delivery flight by gtirloni on Wednesday February 01, 2023 @09:21PM (#34621226)
Got it, those are good points. Thanks.
Re:Easter egg in flight path of last 747 delivery flight by yreg on Thursday February 02, 2023 @05:15PM (#34633982)
Unfortunately it's not always reasonably possible to convince the client / legal team that a cookie banner is not needed in such case and the decision makers would rather be sure than care about the UX. Or so I heard.
Re:Easter egg in flight path of last 747 delivery flight by dspillett on Friday February 03, 2023 @07:01AM (#34640043)
This is understandable, though it shows a lack of legal understanding which could be worrying from a legal team, as there was a lot of scare-mongering when cookie-and-other-tracking legislation was a significant talking point.

Also, largely due to the same anti-anti-tracking voices making spurious claims of what would happen, some put the warning up not because they think they need to, but to avoid having to argue that they don't need to if a complaint is made.

Re:Easter egg in flight path of last 747 delivery flight by yreg on Friday February 03, 2023 @08:38AM (#34640874)
It might be just them refusing to look into it and covering their asses, because they don't care if there is an unnecessary cookie banner.

But to be fair the stories I have heard were something along the lines of: a freelancer making a website for a local restaurant and being unable to convince the restaurant owner, because the owner's nephew said that the cookie banner must be there.

Re:Easter egg in flight path of last 747 delivery flight by cute_boi on Thursday February 02, 2023 @12:25AM (#34622458)
github doesn't require such consent?
Re:Easter egg in flight path of last 747 delivery flight by ronjouch on Thursday February 02, 2023 @04:04AM (#34624022)
Re:Easter egg in flight path of last 747 delivery flight by nathancahill on Thursday February 02, 2023 @02:06AM (#34623176)
No, login cookies are specifically exempt.
Re:Easter egg in flight path of last 747 delivery flight by renewiltord on Thursday February 02, 2023 @06:57AM (#34625365)
And you can just not use the website. Then no data is hoovered. I actually think this is probably the best system. It's double opt-in. If you both commit to your sides, you both sign the deal and get what you want. If neither of you wants to do it, you can both just not sign the deal.
Re:Easter egg in flight path of last 747 delivery flight by chrismorgan on Wednesday February 01, 2023 @06:21PM (#34619599)
The trouble is that popups like this don’t even comply with the relevant legislation. (Which is the ePrivacy Directive after the 2009 amendment, though people largely ignored this part of it until the advent of the GDPR which came into force in 2018. Simplified, ePD says “most cookies must be opt-in”.)

If anything, putting such wildly non-compliant popups should make you more liable to punishment, because it undermines an argument of ignorance.

Re:Easter egg in flight path of last 747 delivery flight by xp84 on Wednesday February 01, 2023 @08:16PM (#34620706)
If these silly laws were enforced, you'd have to shut down the whole Internet anyway.
Re:Easter egg in flight path of last 747 delivery flight by hans_castorp on Thursday February 02, 2023 @01:34AM (#34622947)
> If these silly laws were enforced, you'd have to shut down the whole Internet anyway.

No, the tracking across sites will stop. None of those "silly" laws prohibit the use of e.g. session cookies.

Re:Easter egg in flight path of last 747 delivery flight by varenc on Wednesday February 01, 2023 @09:32PM (#34621300)
I suspect if you access the site from an EU IP address you’ll see an option besides “Accept All”. The layout [0] even seems to leave room for where this other button might be.

edit: looking at the code I even see references to a “Reject All” button as well as an XHR request to a geolocation endpoint[1].

[0]: https://dl.dropboxusercontent.com/s/vw2khgjnyrnqucb/f

[1]: https://geolocation.onetrust.com/cookieconsentpub/v1/geo/loc...

Re:Easter egg in flight path of last 747 delivery flight by thayne on Thursday February 02, 2023 @12:58AM (#34622688)
so apparently they only care about your privacy if you are a citizen of the EU?

And that just brings up the question again: why show the popup to non-EU viewers if the only option is to accept the cookies. It isn't even effective as a form of protest because those viewers have even less influence over EU regulations than EU citizens.

Re:Easter egg in flight path of last 747 delivery flight by dspillett on Thursday February 02, 2023 @03:45AM (#34623902)
> so apparently they only care about your privacy if you are a citizen of the EU?

No, they care about being minimally compliant and laws vary.

A number of places have legislation that just says "users much opt in" but the EU has legislation that says "users must opt-in, but cannot be forced to opt-in by there being no opt-out option".

They don't care about your privacy at all, no matter where you are, if any claim otherwise is made it is a lie.

Re:Easter egg in flight path of last 747 delivery flight by thayne on Thursday February 02, 2023 @11:43AM (#34629094)
I was being sarcastic. I was referring to the fact that the on the EU dialog it said "we care about your privacy", but in the dialog I got in the US it didn't. And was thus implying that despite their claim, they do not care about anyone's privacy.
Re:Easter egg in flight path of last 747 delivery flight by dspillett on Thursday February 02, 2023 @03:35AM (#34623819)
I walked away from the site on first visit due to "accept all" being the only option. It turns out this is the default and if the geolocation lookup fails (apparently that service is blocked by my pihole) no remedy option is present.

A bit of bad design there, not failing safe, if there intention is to be compliant with stricter laws, because a failure in an external dependency makes the site less compliant.

Re:Easter egg in flight path of last 747 delivery flight by nielsbot on Wednesday February 01, 2023 @06:12PM (#34619477)
I actually left the page and came back in private mode, so I am thankful they asked.
Re:Easter egg in flight path of last 747 delivery flight by kefka_p on Thursday February 02, 2023 @01:09AM (#34622768)
I recently realized you can bypass cookie auth requests by toggling reader. Led me to wonder what the EU plans on doing to enforce compliance if JavaScript isn’t enabled, for example. Kind of makes the legal obligations of sites more or less impossible to fulfill under some limited circumstances.
Re:Easter egg in flight path of last 747 delivery flight by krab on Thursday February 02, 2023 @08:26AM (#34626180)
If JavaScript is disabled, most of the offending cookies are not loaded. Session cookies are usually fine wrt GDPR.
Re:Easter egg in flight path of last 747 delivery flight by sillysaurusx on Wednesday February 01, 2023 @06:27PM (#34619676)
Thanks. It wasn't showing anything for me at all, just a bunch of icons of planes. Much appreciated.
Re:Easter egg in flight path of last 747 delivery flight by jt2190 on Wednesday February 01, 2023 @07:06PM (#34620118)
Make sure to choose “yes” to see the Easter egg

> Live flight not found

> The flight with callsign GTI747 is currently not tracked by Flightradar24. It's either out of coverage or has already landed.

> Do you want to see the flight history of this aircraft?

> [ ] No, close pop-up > [X] Yes, show aircraft history

Re:Easter egg in flight path of last 747 delivery flight by hackmiester on Wednesday February 01, 2023 @09:15PM (#34621184)
It opened the app for me, but the app doesn’t offer this option, so it just fails. Great.
Re:Easter egg in flight path of last 747 delivery flight by j5155 on Thursday February 02, 2023 @04:54PM (#34633726)
The app offered this option for me. Are you on the latest version?
Re:Easter egg in flight path of last 747 delivery flight by xp84 on Wednesday February 01, 2023 @08:07PM (#34620624)
There has never been a point to cookie popups, as with most things resulting from technically-illiterate politicians trying to help with technology matters.

Their ideas are at best slightly lower-quality than the results of letting my 2-year-old wash the windows.

Re:Easter egg in flight path of last 747 delivery flight by nerdponx on Wednesday February 01, 2023 @08:30PM (#34620825)
You can also view it on Flightaware, which doesn't have the popup: https://flightaware.com/live/flight/GTI747/history/20230201/...
Re:Easter egg in flight path of last 747 delivery flight by varenc on Wednesday February 01, 2023 @09:52PM (#34621428)
> What’s even the point of the popup then?

If you're in the EU you'll see a "Reject All" option. To confirm this, set a breakpoint in their JS, change your country to an EU one, and the option to "Reject All" cookies appears: https://dl.dropboxusercontent.com/s/09wcuy4yh3qqoaw/reject_a...

Here's a screenshot of where I set the breakpoint and changed my country to France: https://dl.dropboxusercontent.com/s/ju41dpj14pn4onh/bp.png

Re:Easter egg in flight path of last 747 delivery flight by t-writescode on Thursday February 02, 2023 @02:19AM (#34623273)
They chose to spend developer time on that rather than treat their users well.

Wow.

Re:Easter egg in flight path of last 747 delivery flight by smcl on Thursday February 02, 2023 @03:36AM (#34623825)
This is bad but I’ve seen worse. One of the bigger networks has a ~20second “processing” stage when you opt out of these, as a punishment for not clicking “accept” (which works instantly)
Re:Easter egg in flight path of last 747 delivery flight by LtdJorge on Thursday February 02, 2023 @08:45AM (#34626380)
TrustArc
Re:Easter egg in flight path of last 747 delivery flight by jeoqn on Thursday February 02, 2023 @05:10AM (#34624545)
They need the ad money to run the website and the better analytics to know how to improve it. It’s not a mystery.
Re:Easter egg in flight path of last 747 delivery flight by eddieroger on Thursday February 02, 2023 @10:47AM (#34628185)
They chose adhering to the legal requirements over the users, putting them right in the middle of the pack of literally all websites and companies run by more than an individual. You don't have to continue on to their site if you don't wish to.
Re:Easter egg in flight path of last 747 delivery flight by arendtio on Friday February 03, 2023 @07:39PM (#34649964)
Too bad I am from EU, but don't see the reject all button anyway...
Re:Easter egg in flight path of last 747 delivery flight by jerpint on Thursday February 02, 2023 @12:14AM (#34622368)
SOS would’ve been a funny prank
Re:Easter egg in flight path of last 747 delivery flight by SergeAx on Thursday February 02, 2023 @06:02AM (#34624960)
The point is that you won't access the info you came for without shoveling all the tracking malware up your cookie storage.