News for hackers. Stuff that matters.
Re:Easter egg in flight path of last 747 delivery flight by varenc on Wednesday February 01, 2023 @09:32PM (#34621300)
I suspect if you access the site from an EU IP address you’ll see an option besides “Accept All”. The layout [0] even seems to leave room for where this other button might be.

edit: looking at the code I even see references to a “Reject All” button as well as an XHR request to a geolocation endpoint[1].

[0]: https://dl.dropboxusercontent.com/s/vw2khgjnyrnqucb/f

[1]: https://geolocation.onetrust.com/cookieconsentpub/v1/geo/loc...

Re:Easter egg in flight path of last 747 delivery flight by thayne on Thursday February 02, 2023 @12:58AM (#34622688)
so apparently they only care about your privacy if you are a citizen of the EU?

And that just brings up the question again: why show the popup to non-EU viewers if the only option is to accept the cookies. It isn't even effective as a form of protest because those viewers have even less influence over EU regulations than EU citizens.

Re:Easter egg in flight path of last 747 delivery flight by dspillett on Thursday February 02, 2023 @03:45AM (#34623902)
> so apparently they only care about your privacy if you are a citizen of the EU?

No, they care about being minimally compliant and laws vary.

A number of places have legislation that just says "users much opt in" but the EU has legislation that says "users must opt-in, but cannot be forced to opt-in by there being no opt-out option".

They don't care about your privacy at all, no matter where you are, if any claim otherwise is made it is a lie.

Re:Easter egg in flight path of last 747 delivery flight by thayne on Thursday February 02, 2023 @11:43AM (#34629094)
I was being sarcastic. I was referring to the fact that the on the EU dialog it said "we care about your privacy", but in the dialog I got in the US it didn't. And was thus implying that despite their claim, they do not care about anyone's privacy.
Re:Easter egg in flight path of last 747 delivery flight by dspillett on Thursday February 02, 2023 @03:35AM (#34623819)
I walked away from the site on first visit due to "accept all" being the only option. It turns out this is the default and if the geolocation lookup fails (apparently that service is blocked by my pihole) no remedy option is present.

A bit of bad design there, not failing safe, if there intention is to be compliant with stricter laws, because a failure in an external dependency makes the site less compliant.