Check out the Consent-o-matic plugin for Firefox. It will deal with the majority of those for you. https://addons.mozilla.org/en-US/firefox/addon/consent-o-matic/
Privacy
Everything about privacy (the confidentiality pillar of security) -- but not restricted to infosec. Offline privacy is also relevant here.
Ublock has an "annoyances" filter section that removes 95% of these
Now we just need someone to explain it to them in language they can understand. So don't charge them peanuts or “I'll pay out of my petty cash as a tip”, but in a way that has a real learning effect or, even better, a deterrent effect for these grifter actors.
It's great to see it being actively called out in a court of law. How will this be enforced? Companies will not comply unless compelled to do so.
It would be great if part of the requirements on these companies is that they're already collected databases (and any/all backups) had to be 100% wiped.
Along with that, a respected tech outlet should detail how the average person can install add-ons (Ghostery, uBlock Origin, etc) to their browser to help negate this sort of thing from happening again.
Then offer a more advanced method (ie. PiHole with suggested block lists) for those more savvy.
The "cookies" thing is a red herring.
Two observations:
- Most sites have already set cookies before the pop-up. After it, they set at least one more.
- The cookies themselves are fairly harmless. The harm comes from the 3rd-party objects that many web pages pull in. google analytics, google fonts, facebook icons etc. I've even found banking web pages that access google even though (or before) you decline.
I can't remember if the latest recommendation is that using LocalCDN or Decentraleyes is good because it blocks those CDNs from tracking you, or bad because it makes your browser fingerprint more unique.
@[email protected] i'll confess to ignorance here. I see a lot of popups and I know the big lines of gdpr, but I don't know what TCF actually is. I couldn't understand from the link or a quick search. Is there a 5-year-old-with-IT-background explanation somewhere?
@[email protected] I see those warnings as:
"Don't visit this site"
It often works since my mouse clicks on the little cross 😀
@[email protected] This is the first time I've encountered the phrase "malicious compliance", and it's so concise, descriptive and accurate. Thanks!
@[email protected]
So is a huge fine being sent to all of them or just a slap on the wrist?
#Google, #Meta, #Amazon, #Apple, etc don't care about #EU ruling. Until fines TRULY hurt their pockets, they prefer to continue with their profits and pay the price once in a while.
How many of these companies have been fined for similar behaviour in the past? Have they changed it? Yes, they are making their malpractices more hidden and sophisticated.
Bureaucrats don't understand tech well enough to punish them.
@[email protected] "- What pop ups?"
...says the guy using consent-o-matic.
Seriously: i recomend it, it's a great tool directly addressing such malicious compliance and associated dark patterns.
https://consentomatic.au.dk/
(note: on mobile you have to use FireFox as other mobile browsers do not support extensions)