News for hackers. Stuff that matters.
Re:Firefox may soon reject Cookie prompts automatically by basisword on Tuesday April 18, 2023 @04:27PM (#35619562)
The irony that I have to click through one of the ultra-shitty agree/learn more cookie popups just to read this article. Maybe if GHacks didn't comply with the legislation in such a user hostile manner, browser developers wouldn't have to waste time on such features.
Re:Firefox may soon reject Cookie prompts automatically by marcosdumay on Tuesday April 18, 2023 @04:56PM (#35620009)
An outright dishonest cookie prompt, where "reject" or "manage choices" aren't even shown on the first screen.

I imagine the company behind this site is hosted at the US. There are not many places one can still do this.

Re:Firefox may soon reject Cookie prompts automatically by sva_ on Tuesday April 18, 2023 @06:08PM (#35621047)
Most of the big German news sites require you to either accept ads, or pay for a subscription.

It is sadly perfectly legal afaik. Nobody is entitled to your content without agreeing to some terms. Luckily, archive.is works very well. Wish there were more alternatives.

Re:Firefox may soon reject Cookie prompts automatically by solarkraft on Tuesday April 18, 2023 @06:10PM (#35621069)
I also read that it's legal, but can't see how it's in the spirit of the law.
Re:Firefox may soon reject Cookie prompts automatically by guitarbill on Tuesday April 18, 2023 @09:52PM (#35623293)
Non-targeted ads are fine from a privacy perspective/GDPR
Re:Firefox may soon reject Cookie prompts automatically by math_dandy on Tuesday April 18, 2023 @06:48PM (#35621530)
How do they make you accept ads? Do they sniff ad blockers or something? And is this “ads or pay” dichotomy related to cookie modals?
Re:Firefox may soon reject Cookie prompts automatically by hannes0 on Tuesday April 18, 2023 @07:51PM (#35622190)
Enter free: Accept ads. Don’t want ads? Buy pro.

You basically cannot enter if you don’t agree or have payed.

Example: https://t3n.de

Re:Firefox may soon reject Cookie prompts automatically by pwg on Tuesday April 18, 2023 @09:33PM (#35623168)
Interestingly, browsing to your example link with uBlock Origin blocking all javascript by default I get a page that looks like indexes to articles. Clicking on one gives me what appears to be the full article. As I can not read German, I pasted part of the text into google translate, and yes, it does appear to be the full article text.

So for at least that site, it appears that all of the 'protection' is provided by javascript, and if one does not allow the javascript to execute, one receives the article content. There also does not look to be much in the way of ads with the javascript blocked as well.

Re:Firefox may soon reject Cookie prompts automatically by marcosdumay on Tuesday April 18, 2023 @06:53PM (#35621581)
The site doesn't require that you accept the ads. It just uses dark patterns to make you accept tracking.
Re:Firefox may soon reject Cookie prompts automatically by paddw on Tuesday April 18, 2023 @07:47PM (#35622142)
Horrible how people want to be compensated in some manner for their full time work...
Re:Firefox may soon reject Cookie prompts automatically by ricardobeat on Tuesday April 18, 2023 @07:51PM (#35622187)
Would be totally fine if they weren't indexed, linked and summarized in a way that makes them indistinguishable from open web pages, until you click on them.
Re:Firefox may soon reject Cookie prompts automatically by meghan_rain on Tuesday April 18, 2023 @08:03PM (#35622326)
Makes me wonder if creating a plugin that makes your browser pretend to be the Google indexing bot would give you secret access to all paysites?
Re:Firefox may soon reject Cookie prompts automatically by jffry on Tuesday April 18, 2023 @08:15PM (#35622445)
Certainly at this point anybody serious about wanting to give Google special access through their paywall would allow based on the published IP blocks [1] and not an easily spoofed UA header

[1] https://developers.google.com/search/docs/crawling-indexing/...

Re:Firefox may soon reject Cookie prompts automatically by brookst on Tuesday April 18, 2023 @08:40PM (#35622641)
I remember the good old days when Google penalized sites for showing content to their crawler that wasn't available to normal users.
Re:Firefox may soon reject Cookie prompts automatically by jonas-w on Tuesday April 18, 2023 @09:22PM (#35623062)
https://12ft.io works on some sites through pretending to be the google bot.

You can also access any site in the google cache with prepending "https://webcache.googleusercontent.com/search?q=cache:", that will you show you the website like the google bot saw it.

For example github.com would become "https://webcache.googleusercontent.com/search?q=cache:https%..."

It is still worth to try, but many sites already prevent this.

Re:Firefox may soon reject Cookie prompts automatically by stefandesu on Wednesday April 19, 2023 @02:00AM (#35624736)
It just recently stopped working for Zeit.de articles. Seems like their paywall is now higher than 12 feet...
Re:Firefox may soon reject Cookie prompts automatically by sva_ on Wednesday April 19, 2023 @10:31PM (#35635655)
Compensate, sure, but not in the form of a 12 month subscription.
Re:Firefox may soon reject Cookie prompts automatically by Macacity on Sunday April 30, 2023 @11:53AM (#35763742)
They could also show non-personalised ads, if that were their only goal
Re:Firefox may soon reject Cookie prompts automatically by unscaled on Tuesday April 18, 2023 @09:44PM (#35623252)
GDPR does not allow forcing you to get a consent by preventing you from using the service:

"Consent is presumed not to be freely given if it does not allow separate consent to be given to different personal data processing operations despite it being appropriate in the individual case, or if the performance of a contract, including the provision of a service, is dependent on the consent despite such consent not being necessary for such performance."

Since GDPR clearly does not consider ad-tracking cookies as "necessary for the performance of service", this should be against the spirit of the law. I guess it's up for the BfDI and relevant state-level commissioners to prosecute this and I don't know what is their stance, but this type of behavior does not seem compliant.

Of course, there are many other types of non-compliant behavior. Most cookie banners out there make rejecting cookies harder than accepting, and there are many cookie walls that block you from accessing the site at all until you dismiss them. These are clearly non-compliant, but prevalent. Even oversized or disruptive banners that goad you to click "I Agree" in order to dismiss them, cannot be considered as "freely-given consent".

Re:Firefox may soon reject Cookie prompts automatically by revelio on Wednesday April 19, 2023 @08:03AM (#35627091)
They aren't preventing you from using the service. You can consent to the cookies, or also choose to pay.

Which of course requires an account, which requires a cookie, which is then tied to your payment details, and therefore far less private than ads, but that's GDPR for you. A nonsensical law in which nobody involved thought anything through.

Re:Firefox may soon reject Cookie prompts automatically by Nursie on Tuesday April 18, 2023 @10:52PM (#35623722)
It's certainly legal to get you to accept advertising, or buy the service.

What they can't do is say "no tracking, no service".

Re:Firefox may soon reject Cookie prompts automatically by etherealG on Saturday April 22, 2023 @09:45AM (#35666571)
I wish this were true. It’s not. Tracking can be seen as “legitimate interest” because the money earned from that is needed to run the service.

If we could turn tracking I to a banned way to earn money from free visitors, I think we’d all be better off. This is not how gdpr works today.

Re:Firefox may soon reject Cookie prompts automatically by Nursie on Saturday April 22, 2023 @10:19AM (#35666844)
No, it cannot, that’s explicitly not what legitimate interest is about. If that’s the way it’s playing out in Germany then that’s sad, but that’s a problem with the national regulator. Other regulators are dropping the ball on enforcement so it doesn’t surprise me, but that is expressly not legitimate interest.

Legitimate interest is things like a legal requirement to maintain PII because of the services offered.

Re:Firefox may soon reject Cookie prompts automatically by mfru on Wednesday April 19, 2023 @05:08AM (#35626010)
In Austria, there is an ongoing legal case [0] about the pay-or-ads-model. At least the Austrian DPA seems to not totally be ok with it.

[0]: https://noyb.eu/en/pay-or-okay-beginning-end

Re:Firefox may soon reject Cookie prompts automatically by matteocontrini on Wednesday April 19, 2023 @06:14AM (#35626392)
In Italy the privacy authority is looking into it as well [0], but they also said that at first look the "cookie wall" is "in principle" not incompatible with the GDPR.

[0]: https://www.garanteprivacy.it/home/docweb/-/docweb-display/d...

Re:Firefox may soon reject Cookie prompts automatically by rcMgD2BwE72F on Thursday April 20, 2023 @03:34PM (#35645084)
>It is sadly perfectly legal afaik.

No it isn't.

Re:Firefox may soon reject Cookie prompts automatically by seppel on Tuesday April 18, 2023 @05:03PM (#35620129)
> Maybe if GHacks didn't comply with the legislation in such a user hostile manner, browser developers wouldn't have to waste time on such features.

You need the same feature for visiting EU government websites:

https://www.consilium.europa.eu/ (best example)

https://commission.europa.eu/

https://european-union.europa.eu/

Re:Firefox may soon reject Cookie prompts automatically by Deukhoofd on Tuesday April 18, 2023 @05:30PM (#35620527)
There's a major difference between a two button UI with a clear "I refuse cookies" screen, and a screen where you first need to click "Learn More", then manually toggle 5 toggles about what you don't want to allow, then click the greyed out "View our partners" button, then block all of those. The second one is definitely extremely user hostile.
Re:Firefox may soon reject Cookie prompts automatically by tobr on Tuesday April 18, 2023 @05:05PM (#35620159)
These just require a single click to reject, unlike the one on ghacks.net.
Re:Firefox may soon reject Cookie prompts automatically by skywal_l on Tuesday April 18, 2023 @05:22PM (#35620400)
As it happens, GHacks cookie popup is defeated by NoScript. You might give it a try.
Re:Firefox may soon reject Cookie prompts automatically by rickstanley on Tuesday April 18, 2023 @05:47PM (#35620768)
Not OP. I've been using NoScript until today, works as expected of course, but the hassle to have to enable specific scripts to make a useful website work outweighs its usefulness for me.

There's "NoJS", a extension where you can enable all JS through a switch, but it doesn't handle iframes very well at the moment.

Re:Firefox may soon reject Cookie prompts automatically by dp-hackernews on Tuesday April 18, 2023 @05:52PM (#35620836)
Use uMatrix by uBlockOrigin author - now deprecated, but still useful
Re:Firefox may soon reject Cookie prompts automatically by pwg on Tuesday April 18, 2023 @09:35PM (#35623189)
Or the maintained uBlockOrigin, in "I am an advanced user" mode where you get /almost/ a umatrix level ability to selectively enable bits and pieces.
Re:Firefox may soon reject Cookie prompts automatically by wizzwizz4 on Tuesday April 18, 2023 @09:49PM (#35623280)
> but the hassle to have to enable specific scripts to make a useful website work

You only have to do this once per website, so (unless you've already uninstalled it) you've already done the hard work time investment for the sites you visit most often.

Re:Firefox may soon reject Cookie prompts automatically by bombolo on Tuesday April 18, 2023 @05:35PM (#35620594)
It's actually illegal, reject should be as fast as accept.
Re:Firefox may soon reject Cookie prompts automatically by lbotos on Tuesday April 18, 2023 @05:48PM (#35620780)
Aside: I can't remember what site I was on recently, but I saw the craziest cookie prompt. The options were:

Basic / Premium / Ultra

With you guessed it, Ultra being the most tracking cookies. I was flabbergasted.

Re:Firefox may soon reject Cookie prompts automatically by tux3 on Tuesday April 18, 2023 @06:39PM (#35621424)
They should make Ultra have a limited time countdown, to stress people into FOMOclicking.

But of course, for maximum trap potential, we need to find a wording such that Premium is the option without, while Ultra tracking and Basic tracking should both do roughly the same amount of tracking (modulo not really relevant details). With a sufficiently discouraging wall of text, a bad UX, and a limited time option, no one would spend the time to figure out they need to click the middle option.

(This tweet brought to you by our sponsor, Moloch.)

Re:Firefox may soon reject Cookie prompts automatically by brookst on Tuesday April 18, 2023 @08:40PM (#35622648)
Might as well charge $0.99/year for Ultra too.
Re:Firefox may soon reject Cookie prompts automatically by dcow on Tuesday April 18, 2023 @11:44PM (#35624026)
You’re hired!
Re:Firefox may soon reject Cookie prompts automatically by thedailymail on Tuesday April 18, 2023 @06:26PM (#35621287)
Congratulations on being selected to enjoy the Diamond Elite Tier sponsor engagement experience!
Re:Firefox may soon reject Cookie prompts automatically by solarkraft on Tuesday April 18, 2023 @06:10PM (#35621081)
Ultimate tracking experience
Re:Firefox may soon reject Cookie prompts automatically by jokethrowaway on Tuesday April 18, 2023 @05:54PM (#35620874)
nope, any cookie banner is pure cancer

I don't even care about all the dark patterns of now allowing you to dismiss and ignore with one click.

Thank you Europe

Re:Firefox may soon reject Cookie prompts automatically by solarkraft on Tuesday April 18, 2023 @06:13PM (#35621118)
> nope, any cookie banner is pure cancer

I agree, sites shouldn't be doing the things that require showing one.

> I don't even care about all the dark patterns of now allowing you to dismiss and ignore with one click.

How is this a dark pattern?

> Thank you Europe

Indeed! If such tracking has to be allowed, I'm happy that at least I can opt out of it.

Re:Firefox may soon reject Cookie prompts automatically by phendrenad2 on Tuesday April 18, 2023 @07:55PM (#35622227)
> I agree, sites shouldn't be doing the things that require showing one

Like what, showing ads? Collecting payment from the user in leiu of ads? I wonder what website you're imagining that doesn't do something that requires a cookie consent popup. GeoCities, maybe?

Re:Firefox may soon reject Cookie prompts automatically by roelschroeven on Tuesday April 18, 2023 @09:27PM (#35623116)
It's perfectly possible to show ads without collecting data about your users; printed publications have done it for ages. Currently the big players are very heavily pushing for a model with ridiculous levels of user tracking (to the point that many people believe ads and user tracking are inseparably connected), but that doesn't mean it's the only possible model.
Re:Firefox may soon reject Cookie prompts automatically by revelio on Wednesday April 19, 2023 @08:05AM (#35627100)
Print publications give their advertisers detailed demographic data collected via surveys and other techniques. The idea they don't collect data about their readers is wrong.
Re:Firefox may soon reject Cookie prompts automatically by Moldoteck on Wednesday April 19, 2023 @01:05AM (#35624441)
Tracking is needed for relevant ads. No tracking means you still get ads, just not relevant to your interests
Re:Firefox may soon reject Cookie prompts automatically by phendrenad2 on Wednesday April 19, 2023 @08:00AM (#35627067)
So sites need to have their own in-house advertising platform, I guess, because all of the major advertising platforms assume that they'll be able to keep track of how many unique ad views they're getting.
Re:Firefox may soon reject Cookie prompts automatically by mike_hock on Tuesday April 18, 2023 @07:41PM (#35622076)
This is the same Europe that's trying to implement blanket surveillance of all chat communication. Just, you know, by the way. To illustrate how much they actually care about your privacy.

Any popup or obstruction is cancer, cookie consent or otherwise.

We need the same approach as for ad blocking. Just remove the crap from the DOM tree. Block the tracker cookies, based on curated blacklists or heuristics, or both.

We need to take back control of our devices, not leave it to every single website to hopefully obey some law.

Re:Firefox may soon reject Cookie prompts automatically by Moldoteck on Wednesday April 19, 2023 @01:07AM (#35624453)
Cookies are by far not the only option for tracking. Banners yes, should be blocked from dom if you care, because by gdpr law, no respons means refusing
Re:Firefox may soon reject Cookie prompts automatically by JohnMakin on Tuesday April 18, 2023 @06:00PM (#35620949)
Came here to post this. This is a pretty malicious pattern.
Re:Firefox may soon reject Cookie prompts automatically by aziaziazi on Tuesday April 18, 2023 @06:14PM (#35621130)
And there is even worse : sometimes the “partner” list does not have a reject all AND each partner requires a two click steps - waiting for an animation in between.

Edit: remove double post of link

Re:Firefox may soon reject Cookie prompts automatically by 1vuio0pswjnm7 on Tuesday April 18, 2023 @06:03PM (#35620989)
"The irony that I have to click through one of the ultra-shitty agree/learn more cookie popups just to read this article."

According to this sentence the aim is to "just to read" the article. It does not mention anything about looking at images or being able to see a web developer's design choices.

Maybe it's implied that images are required to "read" the article, along with fonts and other graphical enhancements. Not sure.

But just for fun let's assume that the only requirement is to read the text of the article. There are already browsers that allow this and the user will see no cookie popups, and no permanent cookies will be set because the browser only supports "session" cookies. These browsers may not even automatically retrieve resources, e.g., they will not make automated HTTP requests for ad tracking purposes, telemetry, etc. To be clear, there is no point trying set cookies because the browser does not support them. Consequently there's no need for a cookie popup.

Below is exactly what this article looks like in the browser I have been using for over 20 years. I have not used a mouse on a personal (cf. work) computer in over 25 years. NB. Usually pages do not have "ADVERTISEMENT". This blog is obviously trying to cash in on traffic. Generally, pages all look more or less the same. This allows me to read stuff quickly. When I use this browser, I'm only interested in reading text, nothing else. Suits me well for reading HN submissions.

The point I wish to emphasize is that while the web developer's choices, in this case the blog author's, are one part of the problem, another part of the problem is the user's choice of web browser or other client. Choosing a popular graphical browser from amongst a select group that by default process cookies and run Javascript, e.g., Firefox, encourages web developers, blog authors, etc. to use cookie popups, include gratuitous images, insert advertisements, pointers to third party resources, telemetry and so on.

                                                           Firefox may soon reject Cookie prompts automatically

   Martin Brinkmann
   Apr 17, 2023
   Updated  o  Apr 17, 2023
   Firefox
   |
   21
Mozilla is working on a new usability feature in its open source Firefox web browser that can automate interactions with so-called Cookie banners on websites.

ADVERTISEMENT

Most websites on the Internet display cookie banners to users. Certain regulations, like the GDPR, the General Data Protection Regulation, by the European Union, require that sites get consent for placing cookies and data on user devices.

There are numerous different cookie dialogs that users get when they visit websites. From straightforward allow or decline prompts to prompts that provide a great deal of customization or dark patterns.

These cookie prompts can become annoying and at least some users click on the first button that is presented to them to get to the site's content.

ADVERTISEMENT

firefox cookie banner reductionfirefox cookie banner reduction

Mozilla Firefox's new Cookie Banner Reduction feature attempts to make the prompts less annoying for users of the browser. The feature was launched in Nightly recently, and users need to enable it before it becomes active. Firefox users could use extensions, like Auto Cookie Optout, to deal with cookie prompts automatically.

Do the following to enable the feature:

    1. Load about:preferences#privacy in the Firefox address bar.
    2. Scroll down to Cookie Banner Reduction.
    3. Check the Reduce Cookie Banners box to enable the feature.

[remainder of page omitted for brevity]
Re:Firefox may soon reject Cookie prompts automatically by BlueTemplar on Tuesday April 18, 2023 @06:06PM (#35621031)
These days, this just makes me immediately click Reader Mode.
Re:Firefox may soon reject Cookie prompts automatically by subarctic on Tuesday April 18, 2023 @06:10PM (#35621076)
Honestly for the first 10 seconds after I clicked the link, I thought the banner must be a joke because the irony is just too perfect