Europeans spend 575M hours clicking on cookie banners a year
substack.com
substack.com
Related Analysis of economic and productivity losses caused by cookie banners in Europe (330 points, 3 days ago, 380 comments) https://news.ycombinator.com/item?id=42141843
Ignoring the popup doesn't consent cookies.
I thought uBlock Origin was only for certain web browsers, i.e., it is specifically for the www only (cf. the internet).
This consent crap is everywhere. My car asks me *EVERY* time I start it, if it can spy on me. There's no option to accept or deny forever.
It's a purely web-centric, and "web browser"-centric, perspective that denies fact: the internet is more than the www.
A tech bro 100% focused on "web apps" and other garbage might claim that anyone citing the fact that "the internet" is more than the web is "a twisted form of pedantism". After all, the web is where the majority of online advertising is found. This is the tech bro "business model" and web-centrism is therefore vigorously defended.
Fortunately the rest of the internet beyond the web (as accessed through popular web browsers that deliver online advertising) is usable without uBlock Origin, although controlling DNS is often essential.
Big Tech with their online advertising "business model" may control "the web". And we can see that has resulted in a sewer of advertising. But the web is only one use of the internet amongst many, many others that are not used to deliver advertising.
Which sites? Could you name some examples, please?
The page is generated by a script which visits a list of sites using chromium&selenium, and records what cookies get set on first visit.
The page is in Latvian, but each red cell represents a cookie that was set too early, before obtaining consent.
From the sites I've checked, news portals as a category are the worst offenders.
The script itself is here: https://github.com/cuu508/tasting-party
Are you taking any actions in the cases where you detect cookies being set by a website without consent?
In quite a few cases, the friendly email alone does the trick. Sometimes the premature cookies are indeed a bug, and get fixed quickly.
And also it has to be something backed by legislation. Do Not Track was a dumb idea because it had no teeth.
- Can it be used for rejecting consent and not just consenting to everything?
- If so, do you maybe know what happens when it doesn't have a rule for rejecting consent on some site? It would be great if it just lets the pop-up pop up normally.
- How does it handle the "legitimate interest" checkboxes? I.e. can I make it uncheck them all on every site that provides them?
Tracking should have been “opt in” and inferred from browser/device settings. I can see why big tech is dragging their ass to make the UX much better, but government should kick them into overdrive by demanding tracking/cookies be opt-in.
Companies should ultimately set up a system which incentivizes the tracking, rather than stealing it behind the scenes
Tracking is “opt in”. Google and Facebook both lost and had to change their cookie dialogs.
Companies are intentionally noncompliant because it makes them money.
The idea of the legislation was that sites would prefer to trade analytics accuracy for a better user experience. Obviously that hasn't worked out.
If you made tracking required in the device settings, you'd see the exact same pop-ups, they'd just give you a worse and worse user experience until you gave in and changed your device settings, or similar
Same thing the US populace do about being subject to food additives that are banned in the entire civilized world: not much
EU's own government websites are riddled with the cookie banners.
A "simple 1-click opt out" on pretty much every website I visit is still a horrible user experience, at least for me.
I don't save any cookies in my (semi-hobby) product, so I don't display any banners to my visitors.
I am not necessarily commenting on the philosophy behind the banner, but I now have a much fuller understanding of how disruptive they are.
The law demands them to ask for informed consent only if they want to collect more than that technically necessary data. If that consent isn't given voluntarily it isn't consent. If the choise is "Yes" and a puzzle-maze of a thousand flavors of "No" it isn't informed consent. If the cookies exist before asking they haven't been consentual, etc.
If websites cared about users they just honored the Do Not Track setting
I’m told my data is protected in the EU, but of I don’t click Approve on the cookie banner, the newspaper tells me “You must either subscribe to our newsletter or approve cookies”, and the receipe website adds “We fund our cranky website full of undesired videos and where we hide our ingredient list under a “See more…” to get beyond the 3-ingredient limit, with ads, so you must allow cookies.”
If the EU could make itself useful, that would be now.
Not anymore. I mean, you can pay for them now, but you don't get them by default.
> You must either subscribe to our newsletter or approve cookies
That's not legal... or at least some versions it are not. You can report them or try contacting https://noyb.eu/ in case they're interested. But now you know how you actually pay for that website.
> If the EU could make itself useful, that would be now.
They literally created laws which make this behaviour illegal. (Again, some versions anyway) Now it's up to enforcement, but that's country-local not something EU as an organisation can do.
That's also allowed in the EU, it's actually illegal in Sweden for temperatures inside to be under 18C for long periods.
They wanted this (or at least their government officials did).
In the same vein, I want legislation that prohibits drunk driving and I don't get upset with the number of hours it takes to administer sobriety tests.
Stop complaining about strong privacy protection and blame websites that work around the law and force users to submit to total surveillance.
This is tiring.
https://news.ycombinator.com/context?id=42145169
This number keeps showing up because it is repeated just to gain clicks. Maybe HN could just discard any title with this number…
[0] Royal you, speaking to a significant fraction of the HN audience.
Somehow we can at thanks to Europe, so that sites and app that do things well have a clear competitive advantage.
What we can be annoying is Europe not doing much to sanction abused. Like these assholes of trustarc and co that block in "processing" for 2 minutes when you refuse cookies. They pretend that it is the time to make a request to tell all the providers to not track you. But by definition if you don't want to be track there is no request they can do to tell to not keep info that they are not supposed to receive.
They aren't required at all, just don't use any tracking cookies. Cookies that are useful to the user generally don't require the banner, and many analytics tools now have the option to work without cookies (at the cost of not tracking repeat visitors).
Annoying your users with cookie popups is the price sites pay for using invasive tracking. The only miscalculation is that apparently everyone is fine paying that price
Also I’m quite sure your website is not ranked as high on Google if you don’t use GA.
The real issue is ad tracking. If you either show ads or buy ads that lead to your website you are basically forced to add tracking cookies.
Actually we already know that if you want to know how many visitors you have, GA will strongly underestimate, especially with tech literate audience. You may want the log parsing instead.
Even if you want the JS-based solution, you can do it first party, without the need for GA.
> I’m quite sure your website is not ranked as high on Google if you don’t use GA.
Sure enough to quote a source? There lots of high ranking pages, using non-GA solutions.
One out of three videos on Youtube short, several per video on Youtube, Facebook and X sponsored post are hidden within the timeline. That's not even talking about how much ads is outside those walled-gardens, for instance searching for something where SEO is heavily gamed like cooking recipes ends up returning websites where half the page is ads or sponsored content. I typed "buy pc" on Google and the first 4 results are paid ads labelled Sponsored, the first organic result is outside my screen. How are they not intrusive on walled-gardens?
Those cookie banners are not mandatory, functional mandatory cookies do not require consent.
> the first organic result is outside my screen.
And it’s only a referral blogpost.
Is it even worth fighting? What have we won by attempting this fight? The Internet is unusable today.
Actually for me it offered ldlc.com which is a fairly good result. With an ad-blocker, it's the first result. Is it worth fighting? If the alternative is a web that is unusable today, yes. Will it prevent the enshittifiction of the web in the long term? Probably not.
As a European who works in tech and has implemented many cookie banners, I am broadly in favour of GDPR, but I think we need to take a more reasonable approach with smaller companies because it's a huge overhead if you're trying to build a product and you've only got 2-3 technical people on a team.
I also think the type of data held is important. I'm much more concerned about companies which hold significant amounts of sensitive data about me, especially when that data was collected via my behaviour and activity rather than collected from me in a form. I have no problem with a local recruiter keeping my CV and phone number on hand to contact me if a job matches my profile, but a local recruiter and Google are treated the same under GDPR.
Yeah and wait until you know how much medical regulation cost, and food regulations, and pollution regulations. We should just allow these megacorps to do whatever the fuck they want we would make so much more money!
is privacy worth the price? really? that’s your big takeaway from this? what a shitty substack tweet