News for hackers. Stuff that matters.
Re:Firefox may soon reject Cookie prompts automatically by harel on Tuesday April 18, 2023 @04:54PM (#35619978)
I hate those cookie prompts so much I get Cookie Rage every time they appear. I rather be tracked from here to infinity than see another cookie prompt in a site i approved yesterday.
Re:Firefox may soon reject Cookie prompts automatically by louthy on Tuesday April 18, 2023 @05:29PM (#35620507)
Install the consent-o-matic extension. It fills out the forms automatically. It doesn’t catch everything, but is mostly pretty good…

Chrome: https://chrome.google.com/webstore/detail/consent-o-matic/md...

Firefox: https://addons.mozilla.org/en-US/firefox/addon/consent-o-mat...

The thing that really grinds my gears is the phrase “We care about your privacy”. Bullshit! If you cared you wouldn’t even need to ask for consent!

Re:Firefox may soon reject Cookie prompts automatically by bombolo on Tuesday April 18, 2023 @06:51PM (#35621560)
doesn't work in most cases
Re:Firefox may soon reject Cookie prompts automatically by louthy on Wednesday April 19, 2023 @04:40PM (#35633058)
it works in most cases
Re:Firefox may soon reject Cookie prompts automatically by JohnFen on Tuesday April 18, 2023 @07:01PM (#35621688)
> “We care about your privacy”. Bullshit!

That's not bullshit. They really do care about your privacy. They care a lot about relieving you of it.

Re:Firefox may soon reject Cookie prompts automatically by rcMgD2BwE72F on Thursday April 20, 2023 @03:38PM (#35645135)
Re:Firefox may soon reject Cookie prompts automatically by robswc on Tuesday April 18, 2023 @05:23PM (#35620424)
Do they not remember your decision? Most sites I visit never have them and if they do, only need to select it once.
Re:Firefox may soon reject Cookie prompts automatically by hewlett on Tuesday April 18, 2023 @05:34PM (#35620584)
If you reject cookies, the site has no way of knowing you have rejected cookies the next time you visit. You need a cookie in order to store the cookie decision
Re:Firefox may soon reject Cookie prompts automatically by asddubs on Tuesday April 18, 2023 @05:48PM (#35620781)
prompts are not necessary for functional cookies
Re:Firefox may soon reject Cookie prompts automatically by Raicuparta on Tuesday April 18, 2023 @05:51PM (#35620821)
Browsers provide multiple ways to store data like that locally, you don't need cookies. And even if you did, you wouldn't need consent to store that preference.
Re:Firefox may soon reject Cookie prompts automatically by serial_dev on Tuesday April 18, 2023 @06:03PM (#35620982)
I think this is false?

A rejected cookie preference could be stored client side in local storage and depending on that value you could decide whether to show the cookie prompt.

Re:Firefox may soon reject Cookie prompts automatically by mminer237 on Tuesday April 18, 2023 @06:29PM (#35621317)
Directive 2002/58/EC applies to any "hidden information" stored on users' computers. It's irrelevant whether you use cookies or localStorage or IndexedDB. Regardless of what you use to store data on the user's computer, you have to "ensure that users are made aware of information being placed on the terminal equipment", and users must "have the opportunity to refuse to have a cookie or similar device stored on their terminal equipment."

Source: https://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=CELEX...

However, the ICO has suggested that saying "I refuse to allow any cookies on my computer" could be taken as implied consent to allow a cookie stating such.

Re:Firefox may soon reject Cookie prompts automatically by aden1ne on Tuesday April 18, 2023 @06:24PM (#35621241)
Functional cookies like that are explicitly allowed.
Re:Firefox may soon reject Cookie prompts automatically by mminer237 on Tuesday April 18, 2023 @06:39PM (#35621436)
There's no exception for "functional cookies". There's an exception for cookies "strictly necessary" for an "explicitly requested" service. I don't see how remembering you don't want cookies is strictly necessary or explicitly requested. Unless you have a separate optional check for "remember my decision" I would argue that not asking every session would be a violation of the ePrivacy law.
Re:Firefox may soon reject Cookie prompts automatically by jltsiren on Tuesday April 18, 2023 @07:02PM (#35621691)
It's good to remember that judges are not computers. They are not required to follow the law to the letter in weird edge cases, especially when that would be against the intent of the law. They are allowed to do that, but not required.

Many common practices are against some particularly pedantic interpretations of the law. Nobody cares, because following the law to the letter would not be in anyone's interests. If an obnoxious asshole decides to really push the issue, and they are not laughed out of court because the judge is an equally obnoxious asshole, the practice may be found technically illegal. There will likely be no consequences, because it was done in good faith with everyone's best interests in mind.

However, the ruling may force the government to change the letter of the law, wasting a lot of time and money that could have been spent for other purposes. All because of some particularly evil asshole.

Re:Firefox may soon reject Cookie prompts automatically by phendrenad2 on Tuesday April 18, 2023 @08:17PM (#35622460)
It's best to rely on the letter of the law until judges rule otherwise. You're just giving bad legal advice here I think.
Re:Firefox may soon reject Cookie prompts automatically by jltsiren on Tuesday April 18, 2023 @10:09PM (#35623414)
Do you mean the most restrictive interpretation of the law you can imagine? Because you can't actually know what the letter of the law means in specific cases before a judge rules something.

You can of course try living your life like that, but you'll likely find that it becomes effectively impossible to do anything.

Re:Firefox may soon reject Cookie prompts automatically by phendrenad2 on Wednesday April 19, 2023 @07:58AM (#35627057)
No, you use your best judgement, and then add a good safety margin to boot.
Re:Firefox may soon reject Cookie prompts automatically by phendrenad2 on Tuesday April 18, 2023 @08:18PM (#35622467)
I don't get why this is being downvoted. The comment above it is literally wrong.
Re:Firefox may soon reject Cookie prompts automatically by vitehozonage on Tuesday April 18, 2023 @05:34PM (#35620580)
You are likely keeping all your cookies which is a huge privacy problem. If sites remember who you are between sessions then of course they can track you. With addons like Cookie AutoDelete this doesnt happen.

If security conscious it would be recommended to also use disposable VMs for browser sessions like with Qubes OS. Otherwise, with persistence like you describe, it's crazy to me that one bad click could so easily compromise you forever

Re:Firefox may soon reject Cookie prompts automatically by keketi on Tuesday April 18, 2023 @05:48PM (#35620787)
I use incognito mode, which means throughout the day I have to click through cookie consent screens on every single website I visit.
Re:Firefox may soon reject Cookie prompts automatically by harel on Tuesday April 18, 2023 @07:00PM (#35621675)
Not really. I would answer it, accepting all cookies, cakes and whatever just leave me alone. Then, the next day, I would open the same site, and they will ask me again. This is not just on one device - it's on all of them, and everywhere.

Some are really bad - Admiral requires me to either accept all (hundreds of cookies) or press one link, open a form, then accept a default selection. Some also present me with a confirmation popup. Some I have to stare at for a moment to see where is the puzzle to solve - where is that button.

Re:Firefox may soon reject Cookie prompts automatically by RandallBrown on Tuesday April 18, 2023 @07:22PM (#35621891)
StackOverflow has never once remembered my choice. It's the website that frustrates me the most because I felt like they had a lot of goodwill with me and now it's just gone.
Re:Firefox may soon reject Cookie prompts automatically by TylerE on Tuesday April 18, 2023 @08:22PM (#35622506)
I haven’t (intentionally) use Stack Overflow in at least a decade. It was good in the early 2000s, but rapidly became overrun with obvious “give me theee codez” questions, while anything interesting got locked by mods for whom Wikipedia deletionism isn’t enough of an outlet for their inner Karen.
Re:Firefox may soon reject Cookie prompts automatically by suralind on Tuesday April 18, 2023 @05:17PM (#35620326)
there's a chrome extension which I think is called "I don't care about cookies" :)
Re:Firefox may soon reject Cookie prompts automatically by Quarrel on Tuesday April 18, 2023 @06:08PM (#35621054)
Which was bought by Avast, so lots of people switched to the forked open version [1] (thank you GPL).

[1] https://github.com/OhMyGuus/I-Still-Dont-Care-About-Cookies

Re:Firefox may soon reject Cookie prompts automatically by c7DJTLrn on Tuesday April 18, 2023 @05:14PM (#35620282)
I'm beyond Cookie Rage. I'm into Cookie Despair, maybe even Cookie Depression.
Re:Firefox may soon reject Cookie prompts automatically by frereubu on Tuesday April 18, 2023 @05:31PM (#35620539)
You're almost there. The five stages of cookie despair: Denial, Anger, Bargaining, Depression, Acceptance.

(https://en.wikipedia.org/wiki/Five_stages_of_grief in case the reference is too niche)

Re:Firefox may soon reject Cookie prompts automatically by c7DJTLrn on Tuesday April 18, 2023 @05:48PM (#35620783)
To reach Cookie Acceptance I might need a Cookie Therapist.

(sorry, I'm in a silly mood)

Re:Firefox may soon reject Cookie prompts automatically by mike_hock on Tuesday April 18, 2023 @07:47PM (#35622143)
1. mistrust 2. disdain 3. anger 4. rage 5. fury
Re:Firefox may soon reject Cookie prompts automatically by exrook on Tuesday April 18, 2023 @06:31PM (#35621339)
Try adding the EasyList Cookie List[0] to your adblocker to block them all.

It's present in the uBlock Origin filter list settings under Annoyances but not enabled by default. HN readers may also find some of the other default disabled filter lists interesting such as the AdGuard URL Tracking Protection list which strips tracking parameters from URLs.

[0] https://easylist.to/#easylist-cookie-list

Re:Firefox may soon reject Cookie prompts automatically by Sephr on Wednesday April 19, 2023 @04:00AM (#35625589)
Note that using this blocker list can actually increase first party tracking if it blocks a properly configured user respecting consent management platform.
Re:Firefox may soon reject Cookie prompts automatically by aembleton on Wednesday April 19, 2023 @05:03AM (#35625982)
If it blocks the form then permsission hasn't been given, so if it is properly configured they won't be tracking you.
Re:Firefox may soon reject Cookie prompts automatically by Sephr on Thursday April 20, 2023 @01:53AM (#35636849)
Not all consent managers are just forms. Some of them contain enforcement technology and some block lists do not differentiate between the forms and the enforcement technology, even when the consent managers make it easy to differentiate and block individual components.

For example, the manner in which Brave blocks Transcend Consent Manager can increase first party tracking due to Transcend Consent Manager being blocked in its entirety.