{"id":19167,"date":"2022-05-28T19:09:29","date_gmt":"2022-05-29T03:09:29","guid":{"rendered":"https:\/\/www.palada.net\/index.php\/2022\/05\/28\/news-12900\/"},"modified":"2022-05-28T19:09:29","modified_gmt":"2022-05-29T03:09:29","slug":"news-12900","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2022\/05\/28\/news-12900\/","title":{"rendered":"What Do Those Pesky &#8216;Cookie Preferences&#8217; Pop-Ups Really Mean?"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/media.wired.com\/photos\/628fb804055b58ec351db04d\/master\/pass\/cookies_sec_GettyImages-1090196900.jpg\"\/><\/p>\n<p><strong>Credit to Author: Dorri Olds| Date: Fri, 27 May 2022 12:00:00 +0000<\/strong><\/p>\n<p class=\"BylineWrapper-iiTsTb hAGfXd byline bylines__byline\" data-testid=\"BylineWrapper\" itemprop=\"author\" itemtype=\"http:\/\/schema.org\/Person\"><span itemprop=\"name\" class=\"BylineNamesWrapper-dbkCxf erRIa-D\"><span data-testid=\"BylineName\" class=\"BylineName-cKXFOb UCAzg byline__name\"><a class=\"BaseWrap-sc-TURhJ BaseText-fFzBQt BaseLink-gZQqBA BylineLink-eZnyPI eTiIvU mEZDb fNdcwQ bKZMMS byline__name-link button\" href=\"\/author\/dorri-olds\">Dorri Olds<\/a><\/span><\/span><\/p>\n<p>To revist this article, visit My Profile, then <a href=\"\/account\/saved\">View saved stories<\/a>.<\/p>\n<p>To revist this article, visit My Profile, then <a href=\"\/account\/saved\">View saved stories<\/a>.<\/p>\n<p><span class=\"lead-in-text-callout\">You are not<\/span> the only person irritated by those pesky cookie permissions boxes. If you click \u201cAccept\u201d by rote, you have no idea what you\u2019re agreeing to. Or perhaps you don\u2019t care? Many users think they have to accept all cookies to access the website, but that\u2019s not always the case. Another option is to manage your cookies, but what does that even mean?<\/p>\n<p class=\"paywall\">To find out, we spoke to Lou Montulli, the engineer who invented cookies at age 23.<\/p>\n<p class=\"paywall\">\u201cI\u2019m just like everybody else,\u201d says Montulli. \u201cI want that pop-up to go away as soon as possible. The idea of asking people about permissions every single time they go to a website is annoying.\u201d<\/p>\n<p class=\"paywall\">Every website you visit places cookies on your browser. The purpose of the cookie is to allow a website to recognize a browser. That\u2019s why you can return to a site and be recognized, even if you don\u2019t always log in. It\u2019s why the stuff in your shopping cart is still there the next day, or that article remembers where you stopped reading. You don\u2019t have to \u201cintroduce\u201d yourself every time you visit a site, but is the convenience worth it?<\/p>\n<p class=\"paywall\">With Montulli\u2019s help, here are some of the most frequently used terms those annoying permissions boxes are asking you about, and what you might want to choose when you see them.<\/p>\n<p class=\"paywall\">First, let\u2019s explain what some of the types of cookies you\u2019ll see really do:<\/p>\n<p class=\"paywall\">Montulli refers to the pop-up permissions box as \u201ca really silly idea.\u201d His preference would be a much more efficient and technical solution. For example, a user could choose their cookie preferences once in their browser, and every website they visit would honor that choice, similar to the design of <a href=\"https:\/\/www.wired.com\/story\/global-privacy-control-launches-do-not-track-is-back\/\">Do Not Track<\/a>. Montulli explained it like this: \u201cSay I want to accept one type of cookie, but not that other cookie, or those cookies, any website could just ask the browser once what any user\u2019s preferences are.\u201d One and done.<\/p>\n<p class=\"paywall\">That would be better, but what happens when you click \u201cAccept All\u201d\u2014aside from thoughts like, <em>Why does every website keep asking me these questions?<\/em><\/p>\n<p class=\"paywall\">What many people (especially Americans) may not know is that in 2018, the European Union (EU) passed the <a data-offer-url=\"https:\/\/gdpr.eu\/\" class=\"external-link\" data-event-click=\"{&quot;element&quot;:&quot;ExternalLink&quot;,&quot;outgoingURL&quot;:&quot;https:\/\/gdpr.eu\/&quot;}\" href=\"https:\/\/gdpr.eu\/\" rel=\"nofollow noopener\" target=\"_blank\">General Data Protection Regulation<\/a> (GDPR). And even if they have heard of it, they may not know enough to understand that this law is partially why cookie permission boxes are becoming more prevalent.<\/p>\n<p class=\"paywall\">As part of GDPR, companies based outside Europe can be hit with enormous fines if they track and analyze EU visitors to their website. In other words, say your company resides in New York, but that company has European visitors and customers, or collects their data. If that\u2019s the case, they can be penalized to the tune of tens of millions in fines if they don\u2019t disclose their data collection and obtain the user\u2019s consent.<\/p>\n<p class=\"paywall\">Understandably, American companies want to avoid huge fines, which is why US users are seeing more and more of these permission boxes.<\/p>\n<p class=\"paywall\">The boxes are designed to offer users more control over their data, as the EU law was put into place to protect all data belonging to EU citizens and residents. The confusion within the US market exists because the country doesn\u2019t have similar laws to protect the privacy of its citizens.<\/p>\n<p class=\"paywall\">In February 2022, Saryu Nayyar <a data-offer-url=\"https:\/\/www.forbes.com\/sites\/forbestechcouncil\/2022\/02\/01\/is-it-time-for-a-us-version-of-gdpr\/?sh=6119357d637a\" class=\"external-link\" data-event-click=\"{&quot;element&quot;:&quot;ExternalLink&quot;,&quot;outgoingURL&quot;:&quot;https:\/\/www.forbes.com\/sites\/forbestechcouncil\/2022\/02\/01\/is-it-time-for-a-us-version-of-gdpr\/?sh=6119357d637a&quot;}\" href=\"https:\/\/www.forbes.com\/sites\/forbestechcouncil\/2022\/02\/01\/is-it-time-for-a-us-version-of-gdpr\/?sh=6119357d637a\" rel=\"nofollow noopener\" target=\"_blank\">wrote a piece for <em>Forbes<\/em><\/a> that asks if it\u2019s time for a US version of GDPR. Nayyar wrote that the point of such a law would be \u201cgaining explicit consent for collecting data and deleting data if consent is withdrawn.\u201d That sounds like an awesome idea, but after consulting Montulli, the privacy plot thickens.<\/p>\n<p class=\"paywall\">Personally, I find it impossible to separate cookies and privacy online. I asked Montulli if it\u2019s true that everything on the internet stays on the internet.<\/p>\n<p class=\"paywall\">\u201cNo,\u201d he says. That\u2019s because information on the internet is detached from your current online presence. The purpose of the cookie is to allow a website to know when the same browser returns. The cookie may contain additional pieces of information. \u201cBut the predominant use of it is to pass an ID to your browser as an identifier,\u201d he says.<\/p>\n<p class=\"paywall\">\u201cTherefore, they can see that this is the same browser that was here a few seconds ago or even a few months ago. But, once the cookie is cleared, there\u2019s no longer any attachment to you.\u201d<\/p>\n<p class=\"paywall\">The lack of transparency about how cookies work and who manages the data collected from them is a big part of the problem. When you visit a primary website that has hired a third-party ad-tracking network, your browser can get a third-party cookie without your knowledge. \u201cThe lack of transparency means that another cookie by another website has added embedded content, without your knowledge.\u201d<\/p>\n<p class=\"paywall\">Montulli says that if you clear your browser\u2019s cookies frequently there\u2019s no longer any attachment to you and your personal data, at least for that first-party website. \u201cWhen you return to that website after clearing your cookies, or even if you have a new set of cookies, there\u2019s no association between your browser and the browser that connected to that site several months ago with that old cookie.\u201d<\/p>\n<p class=\"paywall\">To test the hypothesis, I tried managing and blocking cookies on random sites. I completely ignored the permission box on any that asked me to accept cookies. The majority of those sites allowed me access anyway. Only a few sites blocked me because I ignored the permissions box. In those cases, the only decision I had to make was whether to trust the site. Since I did not actually need to read any content from those sites, I simply moved on. Bottom line, it doesn&#x27;t hurt to select the cookies you want to accept and those you want to block. Just be prepared to do it every time you visit, or every time you clear your cookies, which you should probably get used to doing regularly.<\/p>\n<p><a href=\"https:\/\/www.wired.com\/story\/what-do-cookie-preferences-pop-ups-mean\" target=\"bwo\" >https:\/\/www.wired.com\/category\/security\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/media.wired.com\/photos\/628fb804055b58ec351db04d\/master\/pass\/cookies_sec_GettyImages-1090196900.jpg\"\/><\/p>\n<p><strong>Credit to Author: Dorri Olds| Date: Fri, 27 May 2022 12:00:00 +0000<\/strong><\/p>\n<p>We asked the engineer who invented cookies what they mean and how to handle them.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10378,10607],"tags":[714,21382,21466],"class_list":["post-19167","post","type-post","status-publish","format-standard","hentry","category-security","category-wired","tag-security","tag-security-privacy","tag-security-security-advice"],"_links":{"self":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/19167","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=19167"}],"version-history":[{"count":0,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/19167\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=19167"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=19167"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=19167"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}