all 40 comments

sorted by: hot top controversial new old
[–] 91 points 5 months ago
[–] 82 points 5 months ago* (last edited 5 months ago) (1 child)

"Me see."

"Me think me understand things well enough."

"Me can't believe me going to say this, but...me reject your cookies."

"Convenience is most effective form of coercion."

  • source
  • hideshow 1 child comment
  • [–] 52 points 5 months ago (8 children)

    One of the benefits of firefox and it's derivatives:

    https://www.firefox.com/en-US/features/total-cookie-protection/

    Yes sites can save cookies on your PC, but it stops sites from looking at each other's cookies.

  • source
  • hideshow 8 child comments
  • [–] 19 points 5 months ago* (7 children)

    Wow that's amazing I didn't know that, and I've been using Firefox in like forever.
    I just checked my browser settings, and sure there it was: edit menu -> settings -> privacy and security
    And it was enabled just like the page you linked writes it's supposed to be. πŸ‘

    I have no idea when that feature was added, I never noticed any negative results from it. Everything works like it's supposed to, like digital signature, banking, and a number of special sites that use cookies to make it easier to use them.

    Nice to know I don't always have to use private windows to avoid cookie snooping between sites.
    Another win for Firefox! πŸ˜€ 😎 πŸ‘

  • source
  • parent
  • hideshow 7 child comments
  • [–] 9 points 5 months ago (3 children)

    Unfortunately, cookies are passΓ© now. Have fun:

    Am I Unique

    Since You Arrived

    I think browsers need to start fighting back with fake intelligence.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 4 points 5 months ago* (last edited 5 months ago) (2 children)

    Those two links are talking about fingerprinting.

    Cookies can contain fingerprints, but they're also used for a bunch of other things, like keeping you logged in, remembering your shopping cart rather than clearing it every page load, storing preferences, remembering if your device has a high DPI screen (so a fresh page load knows to serve higher quality images), etc. Anything where small amounts of data have to be persisted and shared across both the client-side and server-side. They're not always evil.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 5 months ago (2 children)

    I don't see it on mobile unfortunately.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 17 points 5 months ago

    β€œI’m not the monster here.”

  • source
  • [–] 11 points 5 months ago (12 children)

    Then these sites start playing Bill Wurtz's "How about I do it anyway?".

    I mean, apart from simply getting your digital fingerprint via other means, quite a lot of them hide the options so that you would have to painstakingly click/tap through a mountain of toggles.

    I have had to do this with several Android games: You can kind of disable most cookie types with one toggle, EXCEPT the one that says "legitimate interest". Since I wanted to know what exactly they might mean by that, I tapped the tiny question mark circle thing. Guess what: the tooltip just simply said something like 'data that falls under our partner's legitimate interest'. And then, if you want to disable it, the only way to do it is tap something like 'Vendor options', and then see about 117 vendors, and ~85 of those have a toggle next to their name. You have to click each and every one of those.

    ...until the next update, when this window comes up again, waiting for you to give up.

  • source
  • hideshow 12 child comments
  • [–] 3 points 5 months ago

    "legitimate interest" is a sketchy, unclear term. It's not defined by any legislation.

    There's a type of cookie called "strictly necessary". These are things that the site needs to work - for example, to keep you logged in, to remember your shopping cart, etc. Sites do NOT need to offer a opt out from these, and if they're the only cookies the site uses, they don't have to show a banner or cookie consent notice.

    I think "legitimate interest" is really trying to trick people into thinking the cookies are "strictly necessary", when in reality there's some non-necessary tracking cookies lumped into the "legitimate interest" category.

  • source
  • parent
  • [–] 1 point 5 months ago (6 children)

    A lot of sites make it look difficult but you can often opt out of their ad and tracking cookies in 2 clicks. Usually there's a "Save my choices" button that defaults to doing just this.

    It's not in their interest to make it clear.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 1 point 5 months ago* (last edited 5 months ago) (5 children)

    I'm aware of that - I've gone through these way too many times. For example, if you go to kukuklok.com (just a timer with an alarm site), you'll see what I'm talking about, and it's just a few brackets. Some sites have way more of those.

    I'm also aware I can save it, but
    1: cookies can expire, and
    2: whenever you open it on a new device, you can start over

  • source
  • parent
  • hideshow 5 child comments
  • [–] 1 point 5 months ago (4 children)

    Sorry, I don't understand. On kukuklok.com , press Manage Settings and then Save Settings. Avoid the Recommended button. Job done?

  • source
  • parent
  • hideshow 4 child comments
  • [–] 1 point 5 months ago (3 children)

    When you click Manage Settings, you get this panel:

    If you Save Settings, then you allow 148-666 of their partners to access your data. Unless you untick every single "legitimate interest" box, as well.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 5 months ago (2 children)

    What's the difference between limited interest and consent? The latter is unticked by default.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 5 months ago (1 child)

    Yes. This is what my topmost comment was about. It's never explained clearly.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 5 months ago

    I look at itt the other way. The EU's cookie rules require websites to allow opt-out in no more than 2 clicks. I think they're just trying to confuse and wear us down.

    I will continue to 2-click my way through these things and not worry too much. If they wanted to break the rules then they can do it all anyway and ignore my clicked preferences.

  • source
  • parent
  • [–] 10 points 5 months ago (2 children)

    Personally I use consent-o-matic (which automatically refuse cookies) + Librewolf's opt-in cookies. That'll teach them

  • source
  • hideshow 2 child comments
  • [–] 7 points 5 months ago

    "Ok, then we will track you anyway server side by linking your account activity to your ip address, no cookies"

  • source
  • [–] 6 points 5 months ago (4 children)

    Cookies are such a 2010 tracking method.

    Google uses browser profiling and IP triangulation to track you now. If you're not defeating both of those, tell Big G that I said hi.

  • source
  • hideshow 4 child comments
  • [–] 3 points 5 months ago (3 children)

    ip triangulation can be done by a 5 year old with ip-api.com and is really 1990s-2000s tracking, and browser profiling can be defeated with a hardened browser

  • source
  • parent
  • hideshow 3 child comments
  • [–] 2 points 5 months ago (2 children)

    Right, but you have to implement three countermeasures to defeat all three methods.

    No cookies saved, hardened browser, and a VPN. Anything that doesn't cover all three protects nothing.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 5 months ago

    Oh how things change

  • source
  • [–] 1 point 5 months ago

    He should be constantly enraged that they aren't real cookies. He keeps getting tricked and finally snaps, letting the monster out.

  • source
  • I eat my own ass worth of cookies every day abd I hardly ever bothered to what it cones to be in as it were to be, even.

  • source
  • [–] 1 point 5 months ago

    In this world of false plenty... Even the cookie monster has learned restraint.

    God help us all.

  • source
  • [–] 1 point 5 months ago*

    Was going to ask OP to link the source (found here) until I checked the username against the URL and realized this is actually the OOP.

  • source