Hacker News new | ask | show | jobs
by dmix 724 days ago
It also often impacts more than the EU, we still have cookie banners on websites globally because EU came up with a good-intentions idea when 3rd party tracking ad cookies were a major privacy concern. But like a lot of regulations they stick after the world changes/adapts. Now 3rd party cookies are officially dying out at the browser level and browser fingerprinting has long ago eliminated any privacy gain of cookie banners (unless you care about some first party cookie on a site that can already track you across pages server side, or use URL identifiers and other JS/AJAX). Yet annoying non-standardized, sometimes mandatory, modals before you can read a news article or blog post persist for non EU internet users...
2 comments

> sometimes mandatory

This is definitely a bit off-topic compared to the article, but it's worth noting that those modals are there to obtain consent to store and use your personal data, and aren't specifically related to cookies (anymore), but the GDPR. If the news website didn't store personally identifying information about you (anywhere! not just in cookies), it wouldn't have to obtain consent, and wouldn't need any modals.

I think the most annoying part of the regulation has been its lack of enforcement, because it has led to a weird sort of complacency where there's no clear knowledge of what is and isn't required, and then websites half-ass the banner (for example, they should be making it as easy to click Reject as it is to click Accept, not sending you down a dark pattern of checkboxes and stuff), or throw up a banner just to say they have one, even if they don't need it (I've seen that!).

So we get the worst of both worlds: bad modals that don't even do what they're supposed to, and no enforcement to correct any of it.

Websites that are not spying on you do not need to use cookie banner.
The European Union official website has a cookie banner (https://european-union.europa.eu/index_en), does that mean it is spying on me ? Should I be worried ? Or is the definition of "tracking cookies" so wide that even extremely innocuous websites still have to display that banner because the law is stupid ?

"Never attribute to malice that which is adequately explained by stupidity" (Hanlon's razor)