[Plura-list] Decrapify cookie consent dialogs with the Consent-O-Matic
Cory Doctorow
doctorow at craphound.com
Tue Jun 28 13:38:35 EDT 2022
Read today's issue online at: https://pluralistic.net/2022/06/28/bartlebytron-3000/
_,.-'~'-.,__,.-'~'-.,__,.-'~'-.,__,.-'~'-.,__,.-'~'-.,_
Sponsor me for the Clarion Write-A-Thon! I'm writing 10,000 words on my prison-tech thriller "Some Men Rob You With a Fountain Pen" and raising scholarship money for the Clarion SF/F workshop, which I graduated from in 1992.
https://clarionwriteathon.com/members/profile.php?writerid=293388
_,.-'~'-.,__,.-'~'-.,__,.-'~'-.,__,.-'~'-.,__,.-'~'-.,_
Today's links
* Decrapify cookie consent dialogs with the Consent-O-Matic: Comcom steps in where GDPR enforcement failed.
* Hey look at this: Delights to delectate.
* This day in history: 2002, 2007, 2012, 2017, 2021
* Colophon: Recent publications, upcoming/recent appearances, current writing projects, current reading
_,.-'~'-.,__,.-'~'-.,__,.-'~'-.,__,.-'~'-.,__,.-'~'-.,_
👨🏿🔧 Decrapify cookie consent dialogs with the Consent-O-Matic
Remember when they sneered at Geocities pages for being unusable eyesores? It's true, those old sites had some, uh, *idiosyncratic* design choices, but at least they reflected a real person's exuberant ideas about what looked and worked well. Today's web is an unusable eyesore *by design*.
Start with those fucking "sign up for our newsletter" interruptors. Email is the last federated protocol standing, so everyone who publishes is desperate to get you to sign up to their newsletter, which nominally bypasses Big Tech's chokepoint on communications between creators and audiences. Worst part: they're wrong, email's also been captured:
https://doctorow.medium.com/dead-letters-73924aa19f9d
Then there's the designer's bizarre and sadistic conceit that "black type on a white background" is ugly and "causes eye-strain." This has led to an epidemic of illegible grey-on-white type that I literally can't read, thanks to a (very common) low-contrast vision disability:
https://uxmovement.com/content/why-you-should-never-use-pure-black-for-text-or-backgrounds/
Often grey-on-white type sins are compounded with minuscule font sizing. You can correct this by increasing the font size from teeny-weeny-eyestrain-o-rama to something reasonable, but when you do, all the static elements on the page size up with the text, so the useless header and footer bars filled with social media buttons and vanity branding expand to fill the whole screen.
This, in turn, is made a billion times worse by the absurd decision to hide scrollbars (shades of Douglas Adams' description of airports where they "expose the plumbing on the grounds that it is functional, and conceal the location of the departure gates, presumably on the grounds that they are not").
https://www.goodreads.com/quotes/3205828-it-can-hardly-be-a-coincidence-that-no-language-on
Scrolling a window (without using RSI-inflaming trackpad gestures) is now the world's shittiest, most widely played video-game, a hand-eye coordination challenge requiring sub-pixel accuracy and split-second timing to catch the scroll-bar handle in the brief, flashing instant where blips into existence:
https://twitter.com/doctorow/status/1516136202235043841
One of the scariest things about the precarity of Firefox is the prospect of losing some of the customizations and stock features I rely on to decrapify the web - stuff I use so often that I sometimes forget that it's not how everyone uses the web:
https://www.wired.com/story/firefox-mozilla-2022/
For example, there's Firefox's Reader Mode: a hotkey that strips out all the layout and renders the text of an article as a narrow, readable column in whatever your default font is. I reach for ctrl-alt-r so instinctively that often the publisher's default layout doesn't register for me.
Reader Mode (usually) bypasses interruptors and static elements, but Firefox isn't capable of deploying Reader Mode on every site. The Activate Reader View plugin can sometimes fix this:
https://addons.mozilla.org/en-US/firefox/addon/activate-reader-view/
But when it can't there's my favorite, indispensable Javascript bookmarklet: Kill Sticky, which hunts through the DOM of the page you've got loaded and nukes any element that is tagged as "sticky" - which generally banishes any permanent top/bottom/side-bars with a single click:
https://github.com/t-mart/kill-sticky
A recent addition to my arsenal is Cookie Remover. Click it once and it deletes all cookies associated with the page you've currently loaded. This resets the counter on every soft paywall, including the ones that block you from using Private Browsing. Click this once, then reload, and you're back in business:
https://addons.mozilla.org/en-US/firefox/addon/cookie-remover/
Today, I added another plug-in to my decrapification rotation: Consent-O-Matic, created by researchers at Denmark's Aarhus University. Consent-O-Matic identifies about 50 of the most commonly deployed GDPR tracking opt-out dialog boxes and automatically opts you out of all tracking, invisibly and instantaneously:
https://consentomatic.au.dk/
We shouldn't need Consent-O-Matic, but we do. The point of the GDPR was to make tracking users painful for internet companies, by forcing them to break down all the different data they wanted to gather and the uses they wanted to put it to into a series of simple, yes/no consent requests. The idea was to create boardroom discussions where one person said, "OK, let's collect this invasive piece of data" and someone else could say, "Fine, but that will require us to display eight additional dialog boxes so we'll lose 95% of users if we do."
https://pluralistic.net/2021/11/26/ico-ico/#market-structuring
What's more, the GDPR said that if you just bypassed all those dialog boxes (say, by flipping to Reader Mode), the publisher had to assume you *didn't* want to be tracked.
But that's not how it's worked. A series of structural weaknesses in European federalism and the text of the GDPR itself have served to encrapify the web to a previously unheard-of degree, subjecting users to endless cookie consent forms that are designed to trick you into opting into surveillance.
Part of this is an enforcement problem. The EU Commission we have today isn't the Commission that created the GDPR, and there's a pervasive belief that the current Commission decided that enforcing their predecessors' policies wasn't a priority. This issue is very hot today, as the Commission considers landmark rules like the Digital Services Act (DSA) and the Digital Markets Act (DMA), whose enforcement will be at the whim of their successors.
The failures of EU-wide enforcement is compounded by the very nature of European federalism, which gives member states broad latitude to interpret and enforce EU regulations. This is most obviously manifested in EU member states' tax policies, with rogue nations like Luxembourg, Malta, the Netherlands and Ireland vying for supreme onshore-offshore tax haven status.
Not surprisingly, countries whose tax-codes have been hijacked by multinational corporations and their enablers in government are likewise subject to having their other regulations captured by the companies that fly their flags of convenience.
America's biggest Big Tech giants all pretend to be headquartered in Ireland (which, in turn, allows them to pretend that their profits are hovering in a state of untaxable grace far above the Irish Sea). These same companies ensured that Ireland's Data Protection Commissioner's Office is starved of cash and resources. Big Tech argues that their Irish domicile means that anyone who wants to complain about their frequent and enthusiastic practice of wiping their asses with the text of the GDPR has to take it up with the starveling regulators of Ireland.
That may change. Max Schrems - whose advocacy gave rise to the GDPR in the first place - has dragged the tech giants in front of *German* regulators, who are decidedly more energetic than their Irish counterparts:
https://pluralistic.net/2020/05/15/out-here-everything-hurts/#noyb
The new EU tech competition laws - the DMA and DSA - aim to fix this, shoring up enforcement in a way that should end these "consent" popups. They also seek to plug the GDPR's "legitimate purpose" loophole, which lets tech companies spy on you and sell your data without your consent, provided they claim that this is for a "legitimate purpose."
But in the meantime, GDPR consent dialogs remain a hot mess, which is where Consent-O-Matic comes in. Consent-O-Matic automates away the tedious work of locating all the different switches you have to click before you *truly* opt out of consent-based tracking. This practice of requiring you to seek out multiple UI elements is often termed a "Dark Pattern":
https://dl.acm.org/doi/pdf/10.1145/3313831.3376321
But while "Dark Pattern" has some utility as a term-of-art, I think that it's best reserved for truly sneaky tactics. Most of what we call "Dark Patterns" fits comfortably in under the term "fraud." For example, if "Opt Out of All" doesn't opt out of all, unless you find and toggle another "I Really Mean It" box, that's not a fiendish trick, it's just a scam.
Whether you call this "fraud" or a "Dark Pattern," Consent-O-Matic has historic precedent that suggests that it could really make a difference. I'm thinking here of the original browser wars, where Netscape and Internet Explorer (and others like Opera) fought for dominance on the early web.
That early web had its own crapification: the ubiquitous pop-up ad. Merely opening a page could spawn *dozens* of pop-ups, some of them invisible 1px-by-1px dots, others that would run away from your cursor across the screen if you tried to close them, and they'd all be tracking you and auto-playing 8-bit music.
The pop-up ad was killed by the pop-up *blocker*. When browsers like Mozilla and Opera started blocking pop-ups by default, users switched to them in droves. That meant that an ever-smaller proportion of web users could even *see* a pop-up, which meant that advertisers stopped demanding pop-ups. Publishers - who knew their readers hated pop-ups but were beholden to advertisers to keep the lights on - were finally able to convince advertisers that pop-ups were a bad idea. Why pay for ads that no one will see?
Pop-up blockers are an early example of Adversarial Interoperability, AKA Competitive Compatibility (comcom for short). That's the practice of improving an existing product or service by making an add-on or plug in that changes how it behaves to make it more responsive to its users' interests, without permission from the original manufacturer:
https://www.eff.org/deeplinks/2019/10/adversarial-interoperability
It's been more than 20 years since the Platform for Privacy Preferences (P3P) tried to get tech companies to voluntarily recognize and honor their users' privacy choices. It failed:
https://en.wikipedia.org/wiki/P3P
Do Not Track, another attempt to do the same, did not fare much better:
https://en.wikipedia.org/wiki/Do_Not_Track
But you know what actually worked? Tracker-blockers and ad-blockers, "the largest consumer boycott in history":
https://www.eff.org/deeplinks/2019/07/adblocking-how-about-nah
Making it *impossible* to track users is of great assistance to efforts to make it *illegal* to track users. Tools like Consent-O-Matic change the "security economics" of crapification, by turning the consent theater of illegal cookie popups into actual, GDPR-enforceable demands by users not to be tracked:
https://doctorow.medium.com/automation-is-magic-f4c1401d1f0d
Decrapifying the web is a long, slow process. It's not just using interoperability to restore pluralism to the web, ending the era of "five giant websites, each filled with screenshots of text from the other four":
https://twitter.com/tveastman/status/1069674780826071040
It's also using a mix of technology and regulation to fight back against deliberate crapification. Between Consent-O-Rama, Reader Mode, Kill Sticky and Cookie Remover, it's possible to decrapify much of your daily browsing and substantially improve your life.
_,.-'~'-.,__,.-'~'-.,__,.-'~'-.,__,.-'~'-.,__,.-'~'-.,_
👨🏿🔧 Hey look at this
* How to Unionize Your Workplace: a step-by-step guide https://www.socialistalternative.org/2022/06/27/how-to-unionize-your-workplace-a-step-by-step-guide/
_,.-'~'-.,__,.-'~'-.,__,.-'~'-.,__,.-'~'-.,__,.-'~'-.,_
👨🏿🔧 This day in history
#20yrsago Warchalking in government https://web.archive.org/web/20020815000000*/http://www.blackbeltjones.com/warchalking/archives/000265.html
#20yrsago Bruce Sterling on Ubiquitous Computing and the canard of stalled innovation https://memex.craphound.com/2002/06/28/sterling-on-ubiquitous-computing-and-the-canard-of-stalled-innovation/
#20yrsago 802.11a card for the price of dinner for two https://memex.craphound.com/2002/06/28/802-11a-card-for-the-price-of-dinner-for-two/
#15yrsago Real-money game-traders interviewed https://games.slashdot.org/story/07/06/28/0415211/the-mmog-moneysellers-respond-to-your-questions
#10yrsago Eulogy for Erik “Possum Man” Stewart https://memex.craphound.com/2012/06/28/eulogy-for-erik-possum-man-stewart/
#10yrsago Snow White rides, secret pockets of theme-park horror https://passport2dreams.blogspot.com/2012/06/through-forest-snow-whites-adventures.html
#10yrsago Chinese corruption and looting on a vast scale: industry, government, and military http://www.debtdeflation.com/blogs/2012/06/28/the-looting-of-china-by-the-kleptokapitalist-bourgeoisie-roaders/
#5yrsago UK government won’t promise help to remove highly flammable high-rise cladding https://www.independent.co.uk/news/uk/home-news/grenfell-tower-cladding-scandal-council-funding-government-no-guarantee-local-government-budgets-a7809216.html
#5yrsago David Cameron and Prince William condemned in leaked FIFA bribery and corruption report https://www.telegraph.co.uk/news/2017/06/27/prince-william-david-cameron-caught-fifa-corruption-scandal/
#5yrsago Ransomware crook’s email provider shuts down account, so now no one can pay their ransom https://posteo.de/en/blog/info-on-the-petrwrappetya-ransomware-email-account-in-question-already-blocked-since-midday
#5yrsago Industrial robotics security is really, really terrible https://robosec.org/downloads/paper-robosec-sp-2017.pdf
#5yrsago Travel tip: don’t throw coins into your plane’s engine “for blessings” https://www.scmp.com/news/china/society/article/2100242/elderly-flight-passenger-throws-coins-engine-luck-delays-take
#5yrsago Texas Congresscritter wants to gag small investors who object to large CEO paychecks https://corpgov.law.harvard.edu/2017/06/27/federal-bill-attempts-to-silence-investors/
#5yrsago Researchers demonstrate attack for pwning entire wind-farms https://www.wired.com/story/wind-turbine-hack/
#5yrsago EFF will defend McMansion Hell from Zillow’s copyfraudulent bullying https://mcmansionhell.com/post/162344741791/update
#1yrago Lazy Congress only schedules 9 days' work this summer https://pluralistic.net/2021/06/28/dubious-quant-residue/#back-to-work-you
#1yrago Podcasting "Qualia": My column on quant-bias, antitrust, drug policy and epidemiology https://pluralistic.net/2021/06/28/dubious-quant-residue/#incinerators-r-us
_,.-'~'-.,__,.-'~'-.,__,.-'~'-.,__,.-'~'-.,__,.-'~'-.,_
👨🏿🔧 Colophon
Today's top sources: Red Ferret (https://www.redferret.net/).
Currently writing:
* Some Men Rob You With a Fountain Pen, a Martin Hench noir thriller novel about the prison-tech industry. Yesterday's progress: 532 words (20180 words total)
* The Internet Con: How to Seize the Means of Computation, a nonfiction book about interoperability for Verso. Yesterday's progress: 500 words (16667 words total)
* Picks and Shovels, a Martin Hench noir thriller about the heroic era of the PC. (92849 words total) - ON PAUSE
* A Little Brother short story about DIY insulin PLANNING
* Vigilant, Little Brother short story about remote invigilation. FIRST DRAFT COMPLETE, WAITING FOR EXPERT REVIEW
* Moral Hazard, a short story for MIT Tech Review's 12 Tomorrows. FIRST DRAFT COMPLETE, ACCEPTED FOR PUBLICATION
* Spill, a Little Brother short story about pipeline protests. FINAL DRAFT COMPLETE
* A post-GND utopian novel, "The Lost Cause." FINISHED
* A cyberpunk noir thriller novel, "Red Team Blues." FINISHED
Currently reading: Analogia by George Dyson.
Latest podcast: Reasonable Agreement: On the Crapification of Literary Contracts https://craphound.com/news/2022/06/27/reasonable-agreement-on-the-crapification-of-literary-contracts/
Upcoming appearances:
* A New HOPE (NYC), Jul 24
https://www.hope.net/
Recent appearances:
* Supp-Lie Demand (Bad Faith podcast with Briahna Joy Gray):
https://www.patreon.com/posts/67550669
* The Sci-Fi Feedback Loop: Mapping Fiction’s Influence on Real-World Tech
https://csi.asu.edu/calendar/events/the-sci-fi-feedback-loop-mapping-fictions-influence-on-real-world-tech/
* Privacy is the New Celebrity
https://www.buzzsprout.com/1806101/10643084
Latest book:
* "Attack Surface": The third Little Brother novel, a standalone technothriller for adults. The *Washington Post* called it "a political cyberthriller, vigorous, bold and savvy about the limits of revolution and resistance." Order signed, personalized copies from Dark Delicacies https://www.darkdel.com/store/p1840/Available_Now%3A_Attack_Surface.html
* "How to Destroy Surveillance Capitalism": an anti-monopoly pamphlet analyzing the true harms of surveillance capitalism and proposing a solution. https://onezero.medium.com/how-to-destroy-surveillance-capitalism-8135e6744d59 (print edition: https://bookshop.org/books/how-to-destroy-surveillance-capitalism/9781736205907) (signed copies: https://www.darkdel.com/store/p2024/Available_Now%3A__How_to_Destroy_Surveillance_Capitalism.html)
* "Little Brother/Homeland": A reissue omnibus edition with a new introduction by Edward Snowden: https://us.macmillan.com/books/9781250774583; personalized/signed copies here: https://www.darkdel.com/store/p1750/July%3A__Little_Brother_%26_Homeland.html
* "Poesy the Monster Slayer" a picture book about monsters, bedtime, gender, and kicking ass. Order here: https://us.macmillan.com/books/9781626723627. Get a personalized, signed copy here: https://www.darkdel.com/store/p2682/Corey_Doctorow%3A_Poesy_the_Monster_Slayer_HB.html#/.
Upcoming books:
* Chokepoint Capitalism: How to Beat Big Tech, Tame Big Content, and Get Artists Paid, with Rebecca Giblin, nonfiction/business/politics, Beacon Press, September 2022
This work licensed under a Creative Commons Attribution 4.0 license. That means you can use it any way you like, including commercially, provided that you attribute it to me, Cory Doctorow, and include a link to pluralistic.net.
https://creativecommons.org/licenses/by/4.0/
Quotations and images are not included in this license; they are included either under a limitation or exception to copyright, or on the basis of a separate license. Please exercise caution.
_,.-'~'-.,__,.-'~'-.,__,.-'~'-.,__,.-'~'-.,__,.-'~'-.,_
👨🏿🔧 How to get Pluralistic:
Blog (no ads, tracking, or data-collection):
Pluralistic.net
Newsletter (no ads, tracking, or data-collection):
https://pluralistic.net/plura-list
Mastodon (no ads, tracking, or data-collection):
https://mamot.fr/web/accounts/303320
Medium (no ads, paywalled):
https://doctorow.medium.com/
(Latest Medium column: "A Win For Harley Riders" https://doctorow.medium.com/a-win-for-harley-riders-eec8025ac96b)
Twitter (mass-scale, unrestricted, third-party surveillance and advertising):
https://twitter.com/doctorow
Tumblr (mass-scale, unrestricted, third-party surveillance and advertising):
https://mostlysignssomeportents.tumblr.com/tagged/pluralistic
"*When life gives you SARS, you make sarsaparilla*" -Joey "Accordion Guy" DeVilla
More information about the Plura-list
mailing list