This episode of Security Now covered Google’s plan to deprecate third party cookies and the reaction from advertising organizations and websites.
The articles and the opinions of the show hosts are that it may have negative or unintended consequences as rather than relying on Google’s proposed ad selection scheme being run on the client side (hiding information from the advertiser), instead they are demanding first party information from the sites regarding their user’s identification.
The article predicts that rather than privacy increasing, a majority of websites may demand user registration so they can collect personal details and force user consent to provide that data to advertisers.
What’s your opinion of website advertising, privacy, and data collection?
- Would you refuse to visit websites that force registration even if the account is free?
- What’s all the fuss about, you don’t care?
- Is advertising a necessary evil in fair trade for content?
- Would this limit your visiting of websites to only a narrow few you are willing to trade personal details for?
- Is this a bad thing for the internet experience as whole, or just another progression of technology?
- Is this no different from using any other technology platform that’s free (If it’s free, you’re the product)?
- Should website owners just accept a lower revenue model and adapt their business, rather than seeking higher / unfair revenues from privacy invasive practices of the past?
I’m not doom and gloom, I think this is a good step in the right direction.
Users should be able to control what websites have access to their data and a sign in process achieves that. Only sign into a site if you are happy with the website’s privacy policy. I have an account on this website because it has in the privacy policy:
The thing that offends me the most about tracking across the internet is you are tracked wether you agree to a website’s privacy policy or not. Usually you can’t even read the privacy policy without being tracked.
Users who don’t care about any of that can simply tap this button in Chrome (and Google could easily make it even more seamless if they want to, with a simple “share my stuff with every website I visit” setting):
There are also less invasive versions of that, such as the Passkeys standard, where you just share a unique id web the website - no name or email address. Passkeys are supported in every modern browser and the prompt is pretty similar to the screenshot above, minus the ‘share your name and email’ bit.
Personally, I’m only going to sign into websites that I trust. 99.999% of the internet is run by companies i have never even heard of, so obviously I don’t trust them. And some of the sites I have heard of (e.g. Twitter, Reddit), I definitely don’t trust. But there are a few sites like lemmy.world which I trust and there are also plenty of websites websites that do even less tracking than Lemmy. Including a bunch that are ad supported… because you can show an ad to a visitor without knowing the personal details of that visitor.
As things stand right now, I run a browser extension that stops websites from tracking me and they do that by blocking all ads. I don’t see that as a sustainable option - it means those websites are losing money whenever I visit the website. Far better, far more honest, if I just don’t visit those websites at all. But I need to know what the website’s tracking policy is before i can make that choice, so they need to start asking for permission.