News for hackers. Stuff that matters.
Re:FYI: The problem of creeping commercial surveillance by mcpackieh on Friday September 01, 2023 @10:53AM (#37351564)
Strictly necessary cookies do not have to be session cookies. If you read https://gdpr.eu/cookies/ it says they generally will be session cookies, not that they must be. If you think it is appropriate for your users to be already logged in the next time they run their web browser, using a persistent cookie for that is permitted.
Re:FYI: The problem of creeping commercial surveillance by friendzis on Friday September 01, 2023 @12:43PM (#37353150)
Yes, they can become persistent once you get consent or other grounds. You probably get that consent in registration form and "recall" it on login. Otherwise you process data from across sessions, which is a huge red flag.
Re:FYI: The problem of creeping commercial surveillance by mcpackieh on Saturday September 02, 2023 @12:57PM (#37363262)
Wrong, you don't need consent for these kind of cookies.