Skip to content

The Current System of Online Advertising has Been Ruled Illegal by The Belgian Court of Appeal. Advertising itself is Still Allowed, but not in a Way That Secretly Tracks Everyone’s Behavior.

Technology
95 58 317
  • From time to time, important news gets overshadowed by other headlines, even though it could have a profound impact on our (online) world. To most of us, few things are more bothersome than the dreaded cookie banners. On countless websites, you’re confronted with a pesky pop-up urging you to agree to something. You end up consenting without really knowing what it is. If you try to figure out what’s going on, you quickly get lost among the often hundreds of “partners” who want access to your personal data. Even if you do give your consent, it’s questionable whether you truly understand what you’re agreeing to.

    Yeah I’ll need the detailed judgment of this one before considering it a massive win. Consent has always been something that needs to be done willingly and freely. The issue is forcing the whole industry to give a shit about the principle. Maybe IAB will have to shift its practices but I haven’t had any panicked calls yet so I assume this isn’t systemic.

  • From time to time, important news gets overshadowed by other headlines, even though it could have a profound impact on our (online) world. To most of us, few things are more bothersome than the dreaded cookie banners. On countless websites, you’re confronted with a pesky pop-up urging you to agree to something. You end up consenting without really knowing what it is. If you try to figure out what’s going on, you quickly get lost among the often hundreds of “partners” who want access to your personal data. Even if you do give your consent, it’s questionable whether you truly understand what you’re agreeing to.

    Love the sentiment, curious about implementation.

  • Love the sentiment, curious about implementation.

    Simple:

    1. make "no" the default answer when asking
    2. massive fine, in the order of 50% of total revenue, the first time you get caught to be paid before the eventual appeal, which if lost raise the fine by 50%. If not paid in 90 days, the CEO goes to jail until it is paid. From now on for 2 years the company must show that it follow the law.
    3. mandatory jail time for the CEO the second time you get caught with no option for parole or any other alternative sentence like a fine or whatever.

    Or any other solution where the eventual punishment cannot be considered just business cost.

    I know, almost impossible... 😞

  • Simple:

    1. make "no" the default answer when asking
    2. massive fine, in the order of 50% of total revenue, the first time you get caught to be paid before the eventual appeal, which if lost raise the fine by 50%. If not paid in 90 days, the CEO goes to jail until it is paid. From now on for 2 years the company must show that it follow the law.
    3. mandatory jail time for the CEO the second time you get caught with no option for parole or any other alternative sentence like a fine or whatever.

    Or any other solution where the eventual punishment cannot be considered just business cost.

    I know, almost impossible... 😞

    I agree with the sentiment, but that harsh of an enforcement method is overkill, the penalty should be a fine, not jail time, because otherwise it could be abused to an insane extent, and 50% will immediately bankrupt pretty much any company immediately, most well structured businesses could probably sustain fines on the order of 40%, I do like your inclusion of percentage based penalties, but realistically with 2-5% fines, any ceo will be removed from their company after the first or second offense, and the company will bankrupt if they sustain more than a couple fines in a year.

    Edit: after doing the math on some actual companies, I believe 2-5% is too low, realistically 5% is the lowest that would actually change business dealings, and 25% will make a company just barely dip into the red. For this reason I think 5-15% should be the goal post.

  • From time to time, important news gets overshadowed by other headlines, even though it could have a profound impact on our (online) world. To most of us, few things are more bothersome than the dreaded cookie banners. On countless websites, you’re confronted with a pesky pop-up urging you to agree to something. You end up consenting without really knowing what it is. If you try to figure out what’s going on, you quickly get lost among the often hundreds of “partners” who want access to your personal data. Even if you do give your consent, it’s questionable whether you truly understand what you’re agreeing to.

    This is a win for everyone in Europe, and possibly beyond. [Emphasis mine.] Companies may no longer secretly track your behavior based on “consent” given under pressure. Hopefully, this will not only put an end to these dubious practices, but also to those pesky cookie banners.

    But we’re not there yet. Regulators have ruled the system illegal, and the court’s ruling has now confirmed it. Still, the companies making billions from this model won’t stop on their own. That’s why European regulators must now truly step up: enforce the law and make sure these companies actually comply.

    Regulators try not to get compromised by lobbyists when billions of dollars are at stake.

    I sincerely wish you good luck.

  • I agree with the sentiment, but that harsh of an enforcement method is overkill, the penalty should be a fine, not jail time, because otherwise it could be abused to an insane extent, and 50% will immediately bankrupt pretty much any company immediately, most well structured businesses could probably sustain fines on the order of 40%, I do like your inclusion of percentage based penalties, but realistically with 2-5% fines, any ceo will be removed from their company after the first or second offense, and the company will bankrupt if they sustain more than a couple fines in a year.

    Edit: after doing the math on some actual companies, I believe 2-5% is too low, realistically 5% is the lowest that would actually change business dealings, and 25% will make a company just barely dip into the red. For this reason I think 5-15% should be the goal post.

    Then maybe dont do anything illegal???

    You have to activly track someone, it doesnt just "happen".

  • Then maybe dont do anything illegal???

    You have to activly track someone, it doesnt just "happen".

    “Oops, we are tracking children” is something that has happened many times in recent years, IIRC. Probally still intentional.

  • Then maybe dont do anything illegal???

    You have to activly track someone, it doesnt just "happen".

    I know the human tendency is to think in extremes, but I would prefer to have a system that is as balanced as possible, or at least one that affords adecuate protections to all parties involved.

    The issue I have with the "just don't do anything illegal" argument is that depending on how the illegality is defined, it can be used as a tool for bad actors. Take for instance something like the afformentioned 50% penalty with mandatory jail time for repeat offenders, if I decided that jim's furniture store shouldn't exist anymore, I would only need to find some tiny thing wrong with their data handling, like for instance, assuming this specific hole exists, that they asked for contact info before it's needed for purchase verification. Now they may lose on this minor infraction, and pretty much any small business will die a horrible death without half their revenue. Meanwhile the mega corps will likely find some workaround do to their high priced lawyers, but even assuming we make a rock solid definition, they still just cycle the ceo immediately, because no one will want to be an active ceo when they are one court case from jail.

  • Simple:

    1. make "no" the default answer when asking
    2. massive fine, in the order of 50% of total revenue, the first time you get caught to be paid before the eventual appeal, which if lost raise the fine by 50%. If not paid in 90 days, the CEO goes to jail until it is paid. From now on for 2 years the company must show that it follow the law.
    3. mandatory jail time for the CEO the second time you get caught with no option for parole or any other alternative sentence like a fine or whatever.

    Or any other solution where the eventual punishment cannot be considered just business cost.

    I know, almost impossible... 😞

    Sounds like a plan from someone that has never been lobbied by the advertising industry. Many billions are at stake here. Not many governments can withstand the kind of lobby power this money can buy.

    Would be great to see more crackdown on this though. Random companies are collecting tons of data on people via default opt-in methods.

  • Simple:

    1. make "no" the default answer when asking
    2. massive fine, in the order of 50% of total revenue, the first time you get caught to be paid before the eventual appeal, which if lost raise the fine by 50%. If not paid in 90 days, the CEO goes to jail until it is paid. From now on for 2 years the company must show that it follow the law.
    3. mandatory jail time for the CEO the second time you get caught with no option for parole or any other alternative sentence like a fine or whatever.

    Or any other solution where the eventual punishment cannot be considered just business cost.

    I know, almost impossible... 😞

    1. Please. Need this. Thanks
    2. Would this work in any court of law?
    3. I’ve learned recently while the CEO has a lot of control, they are not ultimately in control. The executive board is. Everyone on the board should be jailed and barred from starting a business for 25 years or the length of the sentence, whichever is greater
  • Then maybe dont do anything illegal???

    You have to activly track someone, it doesnt just "happen".

    IIRC there were hospitals in the US that violated HIPAA by accident because they used the Meta Pixel to aggregate useful information on their website, but which was also sending more information than they knew to Meta. So, it does “just happen”.

    Meta is doing it knowingly though so….

  • From time to time, important news gets overshadowed by other headlines, even though it could have a profound impact on our (online) world. To most of us, few things are more bothersome than the dreaded cookie banners. On countless websites, you’re confronted with a pesky pop-up urging you to agree to something. You end up consenting without really knowing what it is. If you try to figure out what’s going on, you quickly get lost among the often hundreds of “partners” who want access to your personal data. Even if you do give your consent, it’s questionable whether you truly understand what you’re agreeing to.

    I'm not a fan of being tracked so don't get me wrong, but without the money earned with advertising the Internet will look very different and not only in a good way.

  • I'm not a fan of being tracked so don't get me wrong, but without the money earned with advertising the Internet will look very different and not only in a good way.

    I disagree. The online advertising industry needs to shrink, and we should probably break up the monopolies.

    Look at this chart:

    U.S. online advertising revenue from 2000 to 2024

    Growth of advertising correlates with enshittification.

  • From time to time, important news gets overshadowed by other headlines, even though it could have a profound impact on our (online) world. To most of us, few things are more bothersome than the dreaded cookie banners. On countless websites, you’re confronted with a pesky pop-up urging you to agree to something. You end up consenting without really knowing what it is. If you try to figure out what’s going on, you quickly get lost among the often hundreds of “partners” who want access to your personal data. Even if you do give your consent, it’s questionable whether you truly understand what you’re agreeing to.

    but but but how are the corporations supposed to make money off of our data if they can't harvest it? Think of the poor corporations!!

  • I'm not a fan of being tracked so don't get me wrong, but without the money earned with advertising the Internet will look very different and not only in a good way.

    Advertising should be illegal.

    The world would be a better place without it.

  • Advertising should be illegal.

    The world would be a better place without it.

    Ding ding ding

    Advertising has funded many things yet hasn't made anything better, ever.

  • From time to time, important news gets overshadowed by other headlines, even though it could have a profound impact on our (online) world. To most of us, few things are more bothersome than the dreaded cookie banners. On countless websites, you’re confronted with a pesky pop-up urging you to agree to something. You end up consenting without really knowing what it is. If you try to figure out what’s going on, you quickly get lost among the often hundreds of “partners” who want access to your personal data. Even if you do give your consent, it’s questionable whether you truly understand what you’re agreeing to.

    Random side note: how is Belgium to live in and what would it look like to live there right now? Asking for a friend.

    Edit: thanks for al the information. I'll move onto learning more about the country and it's people's history.

  • Sounds like a plan from someone that has never been lobbied by the advertising industry. Many billions are at stake here. Not many governments can withstand the kind of lobby power this money can buy.

    Would be great to see more crackdown on this though. Random companies are collecting tons of data on people via default opt-in methods.

    The crazy thing (to me) is that governments can still get all of those billions without the undue influence. Instead of bribes, they can charge fines, taxes, fees for regulatory inspections, etc. When you write the law, you don't have to just shrug when things are obviously broken.

  • Ding ding ding

    Advertising has funded many things yet hasn't made anything better, ever.

    Demonstrably incorrect. Advertising is responsible for many, many fantastic free services. Without it they wouldn’t be free or wouldn’t exist.

  • I agree with the sentiment, but that harsh of an enforcement method is overkill, the penalty should be a fine, not jail time, because otherwise it could be abused to an insane extent, and 50% will immediately bankrupt pretty much any company immediately, most well structured businesses could probably sustain fines on the order of 40%, I do like your inclusion of percentage based penalties, but realistically with 2-5% fines, any ceo will be removed from their company after the first or second offense, and the company will bankrupt if they sustain more than a couple fines in a year.

    Edit: after doing the math on some actual companies, I believe 2-5% is too low, realistically 5% is the lowest that would actually change business dealings, and 25% will make a company just barely dip into the red. For this reason I think 5-15% should be the goal post.

    If the penalty is a fine, then for most it's just the cost of doing business. I agree that the 50% is probably a bit harsh, but executive boards and CEOs must start facing real consequences like jail time or painful fines that make it impossible to just ignore it - so it has to be based of a percentage of revenue at least in the double digits, not profits or a fixed amount.

  • 0 Stimmen
    1 Beiträge
    14 Aufrufe
    Niemand hat geantwortet
  • 337 Stimmen
    19 Beiträge
    112 Aufrufe
    R
    What I'm speaking about is that it should be impossible to do some things. If it's possible, they will be done, and there's nothing you can do about it. To solve the problem of twiddled social media (and moderation used to assert dominance) we need a decentralized system of 90s Web reimagined, and Fediverse doesn't deliver it - if Facebook and Reddit are feudal states, then Fediverse is a confederation of smaller feudal entities. A post, a person, a community, a reaction and a change (by moderator or by the user) should be global entities (with global identifiers, so that the object by id of #0000001a2b3c4d6e7f890 would be the same object today or 10 years later on every server storing it) replicated over a network of servers similarly to Usenet (and to an IRC network, but in an IRC network servers are trusted, so it's not a good example for a global system). Really bad posts (or those by persons with history of posting such) should be banned on server level by everyone. The rest should be moderated by moderator reactions\changes of certain type. Ideally, for pooling of resources and resilience, servers would be separated by types into storage nodes (I think the name says it, FTP servers can do the job, but no need to be limited by it), index nodes (scraping many storage nodes, giving out results in structured format fit for any user representation, say, as a sequence of posts in one community, or like a list of communities found by tag, or ... , and possibly being connected into one DHT for Kademlia-like search, since no single index node will have everything), and (like in torrents?) tracker nodes for these and for identities, I think torrent-like announce-retrieve service is enough - to return a list of storage nodes storing, say, a specified partition (subspace of identifiers of objects, to make looking for something at least possibly efficient), or return a list of index nodes, or return a bunch of certificates and keys for an identity (should be somehow cryptographically connected to the global identifier of a person). So when a storage node comes online, it announces itself to a bunch of such trackers, similarly with index nodes, similarly with a user. One can also have a NOSTR-like service for real-time notifications by users. This way you'd have a global untrusted pooled infrastructure, allowing to replace many platforms. With common data, identities, services. Objects in storage and index services can be, say, in a format including a set of tags and then the body. So a specific application needing to show only data related to it would just search on index services and display only objects with tags of, say, "holo_ns:talk.bullshit.starwars" and "holo_t:post", like a sequence of posts with ability to comment, or maybe it would search objects with tags "holo_name:My 1999-like Star Wars holopage" and "holo_t:page" and display the links like search results in Google, and then clicking on that you'd see something presented like a webpage, except links would lead to global identifiers (or tag expressions interpreted by the particular application, who knows). (An index service may return, say, an array of objects, each with identifier, tags, list of locations on storage nodes where it's found or even bittorrent magnet links, and a free description possibly ; then the user application can unify responses of a few such services to avoid repetitions, maybe sort them, represent them as needed, so on.) The user applications for that common infrastructure can be different at the same time. Some like Facebook, some like ICQ, some like a web browser, some like a newsreader. (Star Wars is not a random reference, my whole habit of imagining tech stuff is from trying to imagine a science fiction world of the future, so yeah, this may seem like passive dreaming and it is.)
  • International Criminal Court hit with "sophisticated" cyberattack

    Technology technology
    3
    6 Stimmen
    3 Beiträge
    28 Aufrufe
    M
    A real mystery indeed.
  • 67 Stimmen
    2 Beiträge
    20 Aufrufe
    1
    Says the same IT group of humanity with their heads buried in code mumbling i hate people into their monitors /s its just a joke. Im describing myself
  • 133 Stimmen
    10 Beiträge
    57 Aufrufe
    01189998819991197253@infosec.pub0
    we're at war with eastasia. We've always been at war with eastasia. Big Brother Really has "trust me bro" energy.
  • Right to Repair Gains Traction as John Deere Faces Trial

    Technology technology
    30
    1
    621 Stimmen
    30 Beiträge
    136 Aufrufe
    R
    Run the Jewels?
  • Building a slow web

    Technology technology
    37
    1
    175 Stimmen
    37 Beiträge
    199 Aufrufe
    I
    Realistically, you don't need security, NAT alone is enough since the packets have nowhere to go without port forwarding. But IF you really want to build front end security here is my plan. ISP bridge -> WAN port of openwrt capable router with DSA supported switch (that is almost all of them) Set all ports of the switch to VLAN mirroring mode bridge WAN and LAN sides Fail2Ban IP block list in the bridge LAN PORT 1 toward -> OpenWRT running inside Proxmox LXC (NAT lives here) -> top of rack switch LAN PORT 2 toward -> Snort IDS LAN PORT 3 toward -> combined honeypot and traffic analyzer Port 2&3 detect malicious internet hosts and add them to the block list (and then multiple other openwrt LXCs running many many VPN ports as alternative gateways, I switch LAN host's internet address by changing their default gateway) I run no internal VLAN, all one LAN because convenience is more important than security in my case.
  • Front Brake Lights Could Drastically Diminish Road Accident Rates

    Technology technology
    337
    1
    595 Stimmen
    337 Beiträge
    1k Aufrufe
    M
    I always say there are drivers out there who only survive by the grace of other drivers.