Hacker Newsnew | past | comments | ask | show | jobs | submit | cornewut's commentslogin

Actually the law cares only about tracking not cookies.

And there are a lot of ways to track users even without cookies.


I think law is fine and there should be only a handful of sites in the Internet that would need such warnings.

Problem is the abuse of technology to track users.


Even assuming that law was necessary (debatable), the idiotic thing was asking millions of websites to do this, instead of automatically in a handful of browsers. Not to mention absurdities like the fact that you need cookies to remember that the user doesn't want cookies, or even worse: https://twitter.com/jgrahamc/status/633551359774691328


Perhaps something is deeply wrong with the way companies approach the internet if millions of them have to display a notice that they are tracking their users.


No, I can see that you are not familiar with the law, I don't blame you because nobody is, since it's incredibly vague about when applies and AFAIK nobody has yet been fined. There are hundreds of companies doing wrong things, no doubt. The "millions" are collateral damage.


I am basing my statements on http://ec.europa.eu/ipg/basics/legal/cookies/index_en.htm (the chapter EU legislation on cookies). According to this guide, the following cokies are exempt from consent: user-input (forms, shopping carts), authentication (for the session), user-centric security, multimedia player, ui customization, social network for logged in members.

Seems quite straightforward and fair.


No it's neither straightforward nor fair. Because it's a whitelist (and a short one), not a blacklist. You can not legislate like that, making potentially illegal any use case that you could have missed or any future use case.

And there is plenty of legitimate usages that are not whitelisted. The most notorious is non-shared traffic analysis. Meaning what basic google-analytics offers and half of the internet uses. There is absolutely nothing wrong with knowing how many unique visitors you got today, and everyone with a website wants to know that.


> There is absolutely nothing wrong with knowing how many unique visitors you got today, and everyone with a website wants to know that.

Maybe people running those websites want to know that, but as a visitor, I might not want that. Being ablet o tell "how many unique visitors you got today" implies that you can group actions by unique visitors, and thus tell e.g. exactly what I was doing on your website over the course of days. If I'm not logged in, I might not want that.

And don't get me wrong - I'm not really a strong privacy advocate or something. Most of the time I don't care much about tracking. But while in theory there's nothing wrong in tracking unique visits, we all know that the primary use of this is to manipulate users and shit ads on them, nowadays mostly cross-site. It's entirely reasonable people get fed up of being on the receiving end of someone else's malice.


> Maybe people running those websites want to know that, but as a visitor, I might not want that. Being ablet o tell "how many unique visitors you got today" implies that you can group actions by unique visitors, and thus tell e.g. exactly what I was doing on your website over the course of days. If I'm not logged in, I might not want that.

That's like asking the guy behind the counter in a shop to not look at you because as long as you are not buying anything you don't want him to know you are there. You are entitled to your feelings but if you don't want to be seen don't go there, or care enough to open an incognito window.

> But while in theory there's nothing wrong in tracking unique visits, we all know that the primary use of this is to manipulate users and shit ads on them, nowadays mostly cross-site.

No, primary use is regular analytics. 99.9% of websites on the internet are not amazon. And if the law was for cross-site information sharing cookies then this would be a totally different debate, but it is not.


What are the best server side only alternatives to google analytics?


Without cookies you can not measure anything but IPs, and IPs are meaningless. You can not count unique users because in a given office you get 50 people/IP. You can not count new/recurrent users because most ISPs don't offer fixed IPs.


The law is only about tracking cookies not all cookies.


I don't think the law specifies to use cookies to disable cookies and it's a good thing - lawmakers shouldn't care about technological solutions.


Thanks, I don't want people who make these stupid laws instead regulate how my browser behaves.


me neither but, assuming that you _had_ to choose, why not? As a user: you get a single standard non-intrusive message you can disable (like remember password). As a website you have one less problem.


Adsense have recently notified publishers that they need to implement a cookie law compliance solution.

I don't know how aggressively they [google] will have to enforce this but the possibility of losing adsense revenue will be a hugely motivating factor.

So the number of sites the need such warnings is about to increase massively.


Or how about Google making a form of Adsense that doesn't track users?

I somehow have a feeling that large corporations intentionally are trying to make this law ridiculous. E.g. why blogspot pages would need such warnings? Please Google just stop tracking.


It could be useful to give publishers this option. It would also be interesting to see what difference it would make in terms of revenue?


> I think law is fine

I acknowledge some benefits of this law, but I vehemently oppose it from the perspective of freedom of speech. I know it's an american innovation, but I think other countries should adopt the same principle that code (and algorithms/protocols) should be considered protected speech. I don't like this law because it interferes with http protocol by dictating how the protocol should be used. EU should not curtail the speech of W3C and of any users of their protocol. If you created a popular protocol then other entities shouldn't suddenly and arbitrarily start dictating how users of your protocol should now use it.

EU should either create their own version of http or create their own client for http, which would be relatively cheap as they would only have to fork firefox or chromium and add sandboxing bound to domanins. Some infrastructure is already there with sandboxing in the form of incognito/private window, it only needs to be extended so that each domain is automatically in its own sandbox instead of just websites you open in incognito window.


As a Northern European I'm often amused by all the studies of allergenic properties of milk coming in from different parts of world.


You could make the titanium parts hollow. That would solve the density problem.


3d printing with metals allows for much more complicated geometries but it's not magic, there are still significant limitations, doubly so when you're talking about implants.

For example, there would have to be perforations for extracting the raw material from inside the hollow interior (probably titanium powder in this case) which means that you now have a hard to post process implant (titanium isn't exactly bioinert) with an exponentially greater surface area for possible autoimmune reactions or infections and an interior that is probably damn near impossible to sterilize (since you'd probably honeycomb the walls).


Just to elaborate - this has been a popular joke among physicists for some 50 years as fusion power was promised already back then.


There is no "delete" on Internet


This is not discussing the entire internet, but trends among specific services designed make it far easier to add your personal data than remove it.

And arguably, your comment is not objectively true, but only tends to be true. There's no technical reason why data (even personal data) can't disappear from the internet - one only need look at the recent worries about the state of repos on Google Code to see that, until there's some overriding interest in backing something up, it doesn't necessarily get backed up.


Actually I can't even imagine handing cash directly to someone - this kind of seems rude to me. It would be even worse if the note was folded. Doing this also might involve hand contact (which again might make someone uncomfortable). (I'm from Northern Europe).


In Finland we give the cash/receipts straight to the person. Nothing rude about it. I don't remember there ever being any hand contact involved in it. I guess some restaurants might use trays, but not the ones that I ever go to.


I'm sorry, I misread it as "New NSA backdoor".


I wonder if any of the "hackers" will get sued.


Why would they be sued?


Non vitae, sed scholae discimus[1]

[1] Epistulae morales ad Lucilium, Seneca


In case anyone is wondering, this translates roughly as "We do not learn for school, but for life." [1]

[1] http://en.wikipedia.org/wiki/Non_scholae_sed_vitae


OP has the phrase backwards, which is either a typo or asserting that learning is being done for the sake of satisfying school requirements rather than for real life.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: