News for hackers. Stuff that matters.
Re:Gmail, Yahoo announce new 2024 authentication requirement... by sleepyhead on Monday October 30, 2023 @07:42PM (#38077575)
This is exactly why GDPR exists. What you are describing is illegal in the EU. Sending marketing communication requires clear opt in consent.
Re:Gmail, Yahoo announce new 2024 authentication requirement... by SOLAR_FIELDS on Monday October 30, 2023 @07:52PM (#38077688)
I just had this experience today. The problem is that at least in the States the regulation is ambiguous enough to be abused to hell and back. Unsubscribe in the States could mean “Unsubscribe from all” or “Unsubscribe from 1 of 20” or it could mean “unsubscribe from all now, but we will arbitrarily resign you up for some new newsletter whenever we feel like it”. I got a spam email today from some no name dropshipper I bought contacts from probably a decade ago, I got LASIK 3 years ago and haven’t needed contacts since.

Some large companies even flagrantly violate the extremely lax rules that exist in the States. Guitar Center has infamously been sending me emails that are in direct violation of the one click unsubscribe regulations for almost a decade now. I can’t even sign in to the account to cancel the emails (which is in direct violation of the regulation- it is ambiguous on a lot of things but the one thing that it isn’t is that you aren’t supposed to be required to log in to opt out of email communications) because it was made with my dad’s email from 20 years ago yet I’m the recipient of the spam.

I did report them; but of course nothing must have happened because they are still doing it.

Re:Gmail, Yahoo announce new 2024 authentication requirement... by vintermann on Tuesday October 31, 2023 @03:20AM (#38081234)
> unsubscribe from all now, but we will arbitrarily resign you up for some new newsletter whenever we feel like it

The LinkedIn way.

Re:Gmail, Yahoo announce new 2024 authentication requirement... by EGreg on Monday October 30, 2023 @08:40PM (#38078235)
Ha, that's child's play. UK has gone much further than the GDPR.

In the UK, it appears to be illegal to even develop a website or app that "instigates" a user to invite their friends to that website or app. This includes pre-filling an email that they send their friends. So, any sort of viral mechanism that people on YCombinator and Hacker News have used to grow their websites with "hockey stick growth" is illegal in the UK since 2020:

https://dpnetwork.org.uk/opinion/refer-a-friend-viral-market...

“An online retailer operates a ‘refer a friend’ scheme where individuals are given 10% off their orders if they participate. The individual provides their own name and email address and the retailer automatically generates an email containing its marketing for the individual to send to their friends and family. The retailer is instigating the direct marketing therefore they have responsibility for complying with the PECR rules. Because the retailer does not have the consent of the friends and family these emails breach PECR.”

That's right, the UK is policing what businesses can provide for people to privately send their own friends! There is simply no easy way for your users to legally invite their own friends to your site, so it can never reach critical mass. This would probably destroy the business model of 99% of YCombinator's B2C companies, Facebook, Twitter, and any website with "invite a friend to do X with you" functionality.

Re:Gmail, Yahoo announce new 2024 authentication requirement... by oefrha on Monday October 30, 2023 @08:47PM (#38078347)
> There is simply no easy way for your users to legally invite their own friends to your site, so it can never reach critical mass.

Referring friends and family by sending emails on your own? Who the fuck does that since ~2010? Ever heard of social media and instant messengers?

Re:Gmail, Yahoo announce new 2024 authentication requirement... by EGreg on Monday October 30, 2023 @09:03PM (#38078572)
It covers instant messengers too. You need to obtain the consent of the person receiving the message, before prefilling the message with the URL and text for their FRIEND to send them. Sorry buddy. That road is closed for you too!

Social media MAY be an exception, but that's because people are already used to receiving a ton of spam on it, so your "viral post" will be ineffective to begin with, and probably filtered by Facebook and not shown to most people at all. Enjoy.

All the original social platforms such as Facebook and Twitter used ways to invite others by email (famously in Harvard etc.) So now they are burning the bridges behind them and no one can do it anymore.

Re:Gmail, Yahoo announce new 2024 authentication requirement... by squeaky-clean on Monday October 30, 2023 @08:16PM (#38077938)
I don't know the legality of this in the EU but often it is required that you opt-in to these marketing emails to create an account or do other basic things on a website.

And then there's those online stores that cover the entire page in a popup that you can get a 20% discount code if you give your email. Technically I've opted into their marketing. But I always just use the coupon and then report the email as spam without bothering to unsubscribe.

Re:Gmail, Yahoo announce new 2024 authentication requirement... by sleepyhead on Tuesday October 31, 2023 @05:31AM (#38082194)
If you need to opt-in to create an account then it is illegal. Yes the discount code for newsletter signup is a result of GDPR consent requirement along with growth hacking technique popularity that is incredibly annoying.
Re:Gmail, Yahoo announce new 2024 authentication requirement... by jupp0r on Monday October 30, 2023 @08:04PM (#38077824)
Are you sure? I don't have more than anecdotal data, but I remember unsubscribing from EU newsletters to be much more cumbersome than from US ones.
Re:Gmail, Yahoo announce new 2024 authentication requirement... by OJFord on Monday October 30, 2023 @08:08PM (#38077856)
If it's at all difficult just reply saying something with the 'GDPR' keyword and they'll hop on it.

A few times I've had unsubscribe links absent or not working for whatever reason and done that and a human's replied and sorted it out.

Re:Gmail, Yahoo announce new 2024 authentication requirement... by carstenhag on Tuesday October 31, 2023 @04:30AM (#38081687)
I was recently subscribed to ~500 newsletters within 10 minutes, and the most annoying ones to unsubscribe where from Brasil, US, India, etc.

(An attacker used the paypal guest account feature and used my IBAN [european bank account number] and tried to hide the mail within those hundreds of mails. They were successful for some days, until the purchase showed up on my bank account)

Re:Gmail, Yahoo announce new 2024 authentication requirement... by sleepyhead on Tuesday October 31, 2023 @05:33AM (#38082205)
What do you mean, how is there a difference between unsubscribing a newsletter from a EU company than a US company?
Re:Gmail, Yahoo announce new 2024 authentication requirement... by queuebert on Tuesday October 31, 2023 @11:20AM (#38086181)
This is my experience as well. US emails are one-click unsubscribe almost without fail, while EU and AU especially require multiple clicks and often entering my email address to unsub. Extremely annoying.
Re:Gmail, Yahoo announce new 2024 authentication requirement... by lopis on Tuesday October 31, 2023 @12:54AM (#38080508)
Even European Websites do this. I know that in principle I never check the "I want to receive spam" but I still do and still have to unsubscribe later.
Re:Gmail, Yahoo announce new 2024 authentication requirement... by sleepyhead on Tuesday October 31, 2023 @05:32AM (#38082198)
Report them to your local DPA. I do not see this so often with big companies but every growth hacking startup send newsletters without consent.
Re:Gmail, Yahoo announce new 2024 authentication requirement... by switch007 on Tuesday October 31, 2023 @03:01AM (#38081151)
And regularly occurs

Also there are separate email marketing laws.