alt Hacker News> If we had no idiotic EU cookie laws
The obnoxious cookie banners are not required by "idiotic EU cookie laws".
> a technical solution would be easy: default segmentation of cookies by what site you are actually visiting, plus all non-first-party ones silently expired after 60 minutes or whatever.
1. This was already implemented
2. Tracking isn't limited to cookies only
> except for the fact that the number one ad network is also the only browser vendor that matters.
Oh, so an "easy" solution isn't easy after all. Who would've thought.
> And of course they also suffer from the politicians who wrote them having no clue how any of this works.
But you do? Like how you only speak about cookies when tracking and user data isn't limited to cookies? Or how "stupid EU cookie law" doesn't even talk about cookies (if we're talking about GDPR)?
Usually the people who really have no clue are exactly the people who say that "there's an easy technical solution".
> The obnoxious cookie banners are not required by "idiotic EU cookie laws".
Of course, the alternative is to not use cookies, to not use any web analytics products, or to resolve to argue the semantics of what is necessary before a judge when sued by one of the many lawyers who now advertise (ironically) all over social media with come-ons like "Did you browse FUZZYSWEATERS .COM? Your data may have been improperly used!"
> 1. This was already implemented
Please let me know what browser does what I describe. Close as I can come is configuring a Chromium based browser to just only keep cookies for certain domains, but it's a pain in the butt so I stopped worrying about it a long time ago.
> Oh, so an "easy" solution isn't easy after all. Who would've thought.
But I went on to detail the much "easier" solution where the EU aims its big swinging...list of mandates... at the 2-3 browser vendors rather than involving 10,000,000 small businesses worldwide in the business of trying to guess if they're "GDPR compliant," or could be in breach because they added some snippet of code from a useful web analytics platform that could be said to "track" users.
Do you really think that it is easier and better to regulate millions of people/companies to make them all do a complex thing in good faith AND do it well, than to make those couple of companies sandbox cookie storage in a way that severely kneecaps cross-site tracking?
> 2. Tracking isn't limited to cookies only
Sure, but also I question to what extent anyone is being harmed by "tracking" in the most broad sense of that word. As far as I can tell, the public believes "tracking is a problem" primarily because they resent retargeting ads. That's all. People see a shirt or a chainsaw or an air fryer "following them around" after they browsed for one, and think "that's weird! THEY know!" Despite the fact that most of those things function very simply, do not give a shit who you are, just some ID that your browser saved and is sending back, and which is tied to a list of SKUs you showed interest in.
The more reasonable concern is more around data brokers and the data about a person being sold and aggregated, which mostly gets concerning when it could be used for stalking, targeting political dissidents, etc. The fact that I spent 34 seconds on A product page, then 32 seconds on B, then added B to my cart and then bounced, that is the nature of all of the data being tracked on 90% of websites, they don't traffic in my location data or even want to collect sensitive information. But every website is affected by the GDPR's vague definitions of "tracking." And ironically, I assume partly because all these in-sandbox "CMPs" barely even work, I haven't even observed a decrease in retargeting ads, the #1 thing that people actually observe and are bothered by.