Hacker News new | ask | show | jobs
by housingpost 2824 days ago
I recommend that anyone that has a problem with this in Europe file a GDPR complaint, and if you're in the US file a complaint with your attorney general. Some states' attornies general are looking for new ways to come down on Google, and this is a good start. If you have a setting to delete all cookies and it doesn't do that, that's against the law in some places.
5 comments

I'd recommend supporting https://noyb.eu/ though.
How can GDPR apply to processes running locally on your machine?

At best, you can claim misleading advertising (which, is often handled by the fair trade commission or something similar, and often has to show damages before they can award anything).

GDPR can apply to personal data on a piece of paper. What matters is the data, and what is done with it.

Does that cookie get read by Google? Of course, or there would be no point. Does it enhance their tracking? Most likely. Is there a GDPR compliant opt-out without loss of features? At first glance it seems not.

They're tampering with the expected operation of the browser so that even after the user explicitly told them not to it still sends personally identifiable tracking information to their servers.

I'm glad the GDPR is in effect, so instead of "this should be illegal" we can say "of course this is blatantly illegal".

I hope they get a fine for this, with multipliers for how deliberate it is, and for keeping on defending the behaviour even after being called out.

Your url does not work for me (404), this one does: https://blog.lukaszolejnik.com/am-i-logged-in-or-not-gdpr-ca...
I'd recommend not using chrom{e,ium} instead. They might be 'forced' by a court to apply bandaids, but they'll just find some new area to exploit.
Not just that but also risk a big fine; "regular" GDPR violations (when warnings are ignored) can be tens of millions, anti-trust fines can be half a billion easily. The EU compensates for tax loopholes via big fines.
The best way to communicate "stop doing stupid shit" to google is not use their services/applications when they do stupid shit. Losing market share/customers is far more impactful than any (currently possible) fines.
It is still anti competitive, a browser that has special rules/code for the browser maker websites. Next they could give their own websites permissions that other websites don't have by default and that you could not remove(or need to find a convoluted way to remove), ex they could give google webpages permissions to access your webcam and microphone by default.

This illegal things needs to be stopped it is not enough that only the people that understand it stop using Chrome.

That has already been done with video auto play.
Since GDPR is in percentage of turnover, how much market share/customers would Google have to loose to equal 1% fine (1% is less than what they should get for this)?

If you can answer that question, and then suggest a possibility for them to actually lose that much market share, then you may be able to demonstrate that losing the market share is far more impactful than any currently possible fines.

Losing a few techies who care about things like this when Google has literally billions of users? This is exactly what governments are meant for.
You know what, I think I will just do both since both are exceedingly easy to accomplish.
I don't understand why something like that would be illegal under the GDPR. You are told when you wipe your cookies that Google cookies won't be deleted. Also your browser letting you wipe your cookies is not some kind of human right.
No it doesn't. Press Ctrl+Shift+Del and it takes you directly to a screen that lets you "delete cookies", which it apparently doesn't. What's surprising about that being illegal? They are literally lying to their users about their privacy.
Just tried it on 69.0.3497.100 and all cookies were deleted and I was logged out from the browser. I also remember seeing a message "you will stay signed on to your Google account" but it seems to have disappeared (or maybe it only shows if you have sync enabled which I don't)
That's not the behavior we are arguing about here though.