this post was submitted on 02 Sep 2024
563 points (99.6% liked)

Cybersecurity - Memes

1905 readers
2 users here now

Only the hottest memes in Cybersecurity

founded 1 year ago
MODERATORS
 

Nothing tells me more that you care about my privacy than sharing my data with hundreds or thousands of companies.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 2 points 2 weeks ago (1 children)

If the plugin knows about it then it can handle it.

[–] [email protected] 4 points 2 weeks ago (2 children)

But how do I know that it does?

[–] [email protected] 6 points 2 weeks ago (1 children)

Read the code https://github.com/cavi-au/Consent-O-Matic ? Check the cookie after it has been set?

It's a valid question and if it wasn't both open-source and popular the doubt would be very justified. Here with so many eyes interested in the topic, the lack of proper reward for the risk, I would argue it's quite a safe bet.

[–] [email protected] 3 points 2 weeks ago (1 children)

I don't know how to read code (like what I would wager is most of the population), so that wouldn't help much, and is another reason for doubt.

Knowing that it's open source definitely helps, but I still worry that the pop ups get updated at a faster rate than the extension does, and unlike with an adblocker, I wouldn't necessarily be able to tell.

As I said, I'll keep it in mind, but at this point avoiding the worst offending sites is still easier (with added bonus that I deprive them of my traffic).

[–] [email protected] 2 points 2 weeks ago* (last edited 2 weeks ago) (1 children)

Unfortunately I don't think this code has been audited by a third party. That being said if there is not an uproar in issues in the repository or a popular fork overtaking it or a bunch of terrible online reviews, I would assume it's relatively safe. It's challenging to have a backdoor or scam or just bad practices with so many eyes on the source code. It's not impossible of course but it's rare, especially when it's something optional, the risk is very high.

Regarding pop-ups I'm not sure I understand. A lot of cookie banners use the same (sadly due to the concentration) services so I believe by supporting only a handful a lot of the Web can be covered. If he plugin doesn't support it, it just does nothing, letting the user decide as they normally would. The rules themselves are also public and can be checked.

Anyway nobody "needs" this so it's fine not using it. It makes me wonder though in practice how it changes behavior, e.g do I sometimes click "allow" or "yes" because I'm just tired, and think "whatever, right now I don't have time for this, I just want the damn information" and if so, does this plugin, assuming it doesn't fail, genuinely help, or not.

[–] [email protected] 1 points 2 weeks ago

Regarding pop-ups I’m not sure I understand. A lot of cookie banners use the same (sadly due to the concentration) services so I believe by supporting only a handful a lot of the Web can be covered. If he plugin doesn’t support it, it just does nothing, letting the user decide as they normally would. The rules themselves are also public and can be checked.

I've seen more and more different kinds of cookie pop ups, and even the ones that look familiar tend to have variations (like in how/where they include "legitimate interests" or how you object to them). I'm sure the people who made the plugin do their best, but the advertisers are constantly trying to find new ways to deceive or confuse people in to accepting their trackers which may not be noticed immediately, and like I said, I have trust issues lol (so if the plugin does nothing, and I can't tell unless I pay the same attention as if I was doing it myself, that's enough to make me pass).

Anyway nobody “needs” this so it’s fine not using it. It makes me wonder though in practice how it changes behavior, e.g do I sometimes click “allow” or “yes” because I’m just tired, and think “whatever, right now I don’t have time for this, I just want the damn information” and if so, does this plugin, assuming it doesn’t fail, genuinely help, or not.

Very very rarely will I give in to the frustration and just click "reject all" and hope for the best (not on any site, like if they have the cookie telling me they're wanting to connect all my devices or whatever, which is always "always active", fuck that), and I hate it every time. Assuming it doesn't fail, then yeah, it would help in those situations, but nothing never fails, so it's back to only trusting my own actions lol

[–] [email protected] 3 points 2 weeks ago (1 children)

By watching it.

There are 2 operating modes. Hide and picture in picture. Using picture in picture mode you can watch it do it's thing.

[–] [email protected] 4 points 2 weeks ago

Using picture in picture mode you can watch it do it’s thing.

Fair enough. Still sounds like more trouble than it's worth (having to look at it do it's thing each time, because each site has its own version, and they also change them regularly. Yes, I have trust issues), there's rarely anything behind the worst cookie pop ups that can't be found elsewhere.

I appreciate the info though, thanks. If things get bad enough I might not have a choice but to at least automate the process if I can no longer avoid it.