Em Adespoton

  • 0 Posts
  • 45 Comments
Joined 1 year ago
cake
Cake day: June 4th, 2023

help-circle






  • That last bit is correct. The privacy commissioners are under-resourced and a large number of businesses are not actually compliant with the GDPR. Only a few highly visible infractions get addressed, and even with those the final result is not fixing the infractions and paying the fine; usually a small payment is made along with an agreement that the party will behave better in the future.








  • That allows it to block those annoying cookie banners without you clicking accept.

    I use a different plugin that lets me set my own preferences about how sites should use cookies, and then it strips those banners and applies MY settings.

    The thing about those cookie banners is that if you choose to reject all cookies, then no cookie is set to tell the site that you reject all cookies, so the banner will be back on your next visit.






  • SSO can be fine, it all depends on how it is implemented. If you run your own OIDS or manage your own FIDO2 keys manually, SSO works great; it means that every time you access an online account, a different challenge/response is sent, but you only have to manage a single account on your end. This means less data to be stolen, and if implemented correctly, a sso-backed login attempt in a new context will require further action, preventing someone from just stealing your cookies/certificates and having full access to all your accounts.

    The problem is that so much SSO junk is intentionally mis-implemented to include third parties in the process where there’s no need for them to be. Avoid those where appropriate.