To be fair, I can actually sort-of see a specific point here:
They are legally required to offer you that cookie choice. If you block that choice, are they in violation of the law even if they cannot apply cookies? Just because their site does implement tech for it (even though you're blocking it, but the law cannot know that) and they cannot show you the popup allowing you to reject the tech (since you're blocking it)?
Weird thing. Doubt there'd be a clear answer without someone dragging someone else in front of a court for it, plus that's of course not why CNN is blocking us here, but it's an interesting thought whether they are even allowed to let you on if they cannot present you with the GDPR choice.
Yeah. GDPR should have been implemented as a mandatory part of HTML or even HTTP that interacts with a builtin browser feature. Let the user make the choice once, in the browser, and let the browser tell the visited site what's allowed. Statutory compliance would mean something like
browser detects and warns about cookies which do not appear to be in compliance with user's preferences (optionally: browser can block cookies which do not appear to be in compliance)
browser detects sites which do not implement the spec at all, and warns the user about that
regulatory body checks for compliance on any site with over X number of users
regulatory body checks major browsers for compliance
Then why can over 100,000 other sites show their cookie banners as required by GDPR while Firefox + unlock origin is active, but somehow one of the largest media companies in America "just can't do it" without disabling your ad-blocker?
If they really couldn't do it, they would do like Home Depot did and block anyone in europe from accessing their site.
This is not about GDPR at all! This is exclusively about forcing you to disable your ad-blocker so they can make more money from offering a bad browsing experience.
The cookie you might be using is going to be storage that's going to contain your preferences. Assuming they actually applied by the regulations they claim to then that cookie actually won't be used to track you it will simply be used for the intended purpose of cookies in the first place.
Not that I agree with their approach but but they are essentially saying here is that since there is no way to save your privacy preferences they are not in compliance with the law by ensuring that you have set your privacy preferences. Which it's kind of bullshit, dick move on their part.
It's the most ironic part of GDPR. To avoid annoying the user, you have to set a cookie to remember that they don't want you using cookies.
We should've encouraged everyone to re-implement the "DNT" request header, or something similar. Much simpler for the site owners/devs, much more convenient for end-users.
They could be telling the truth... It's possible that OP is in Europe and the ad blocker is blocking a GDPR cookie consent notice.
The message explicitly mentions EasyList Cookie, which is described like this on https://easylist.to/:
EasyList Cookie List blocks cookies banners, GDPR overlay windows and other privacy-related notices.
Edit: I'm not agreeing with what they're doing. I'm just saying that the message may be accurate. Having said that, maybe blocking a cookie banner should count as an opt-out, so they shouldn't show this notice and instead just automatically reject the cookies. I'm not sure if the law is clear around this, though.
If you want to opt-out of tracking cookies, consent-o-matic will likely work better. It automatically clicks the right buttons in the consent notice for you.
Edit 2: The law seems unclear about what to do if the consent notice is blocked by the viewer's browser (and thus they can neither accept nor reject cookies), so maybe blocking access to the site is likely the safest approach for them to take.
Imagining a returning user who previously consented. If non essential cookies changed since their last visit, that user needs to consent again. But in scenario, just auto opt them out?
I’m weirdly on the fence between this might be a reasonable block or a violation of GDPR for denying access to users who do not provide consent.
I've had it happen to me for a week or two now. US based. I always just figure if a site doesn't work with my blockers, then I really don't need to see it.
The law is done dumb. They should update it to say "the banner must always have a "reject all" button which rejects everything (including the legitimate interest) on it and it must not be hidden inside any further clicks"
I'm sick of having to search for that button under two sub menus or having to uncheck 20 check boxes. And what the hell is even "legitimate interest"? There's nothing legitimate about any tracking at all. This phrase really offends me every time I read it.
GDPR doesn't require them to ask if they would just not violate our privacy. In other words, it's perfectly legal to assume "no" if they have no means of asking.
The requirement to not track users with cookies does not extend to cookies that make the site work in the first place, such as those which track your login session, or your refusal of other cookies.
I'm not experiencing any of this, but my setup is insane at this point. Ublock origin with a custom bypass paywalls filter list and noscript enabled... no ads... no blocks... Just content. Using mull on android with mullvad DNS.
The only CNN worth anything is CNN International, and that still works fine with all ad blockers raised. But even CNN International started pulling the same stunt, it's not remotely good enough that I would miss it either.
Do you see a similar message for other news and social media sites? My gut tells me that it's just one of many blocklists added to your company's firewall but they don't have a specific message for "blocked because not work related".
I'm getting these messages occasionally, but usually they make sense, such as when I go to online gaming sites or torrenting portals. Didn't try porn - don't want a call from HR. In general, our IT policies are fairly sensible; this is one of the very few outliers.
shitty fearmongering propaganda outlet does shit thing to their website that will only drive away users thereby hampering their own ability to propagandize and fearmonger. no sorry i don't see what's wrong with this picture. never interrupt your enemy while he is making a mistake.
I'm not doubting OP, I just wanted to make sure I was reading the same post as everyone else. Weird that CNN flagged FF as Brave. Could also be a VPN issue, either on or off.
I'll give them benefit of the doubt and assume they're using the brave user agent in Firefox.
If that's the case the solution is simple, switch back to Firefox user agent. Or use Chrome as your user agent, you can whitelist specific sites to use any user agent you want
I got the same message on iOS Safari with no special config or UA switching (just an ad-blocker). I figure it’s a badly implemented feature. But holy shit I thought the browser wars settled out a long time ago and we had decent standards in place, guess we’re regressing back 20 years though.
If CNN wants me to use their website they need to sign a contract that says they need to eat my shit with a spoon. Legal repercussions if they violate.
Otherwise how the FUCK do they know your brother is deciding not to display their bullshit cookie message? Clearly they're reading some information I'd rather they didn't have.
This is Beyond "Can I interest you in some Tracking cookies ?" , this is "You MF better put these cookies down your throat or I will shove them up your Ass".
Heh, we had this problem with a work product a month ago. it's the suppress cookie popups feature.
Legislation in some areas requires people to opt in to cookies, but add blockers block the banner pop, so from a legal compliance standard they're not in compliance even though it's something the users are doing.
The cookie blockers automatically decline cookie consent with the minimum possible cookies.
If your site is GDPR compliant it must respect the consent triggers by the extension as the consent is identical to if a human user correctly filled out the cookie form to acknowledge only the minimum required cookies.
That's assuming the extension manages to hit your trigger correctly. They did not make the js call, just blocked the div. Oddly, they left our full page control block in place. We had to modify our triggers to make it work.
How would blocking the pop-up be violating the law, though? If the pop-up doesn't show, you're not able to agree to cookies. You don't provide your explicit consent, therefore the website must assume you don't want to be tracked. The presence of the pop-up shouldn't be changing anything for people not willing to opt in, should it?
Or perhaps they're self-aware and have set it up to only opt you out by filling out the form, which you can't do if it isn't there. Or they just want you to agree to those "required" cookies? I don't know.
Blocking the pop-up isn't violating the law. Nevertheless we needed the cookie for the login. If we didn't get you to authorize the cookie you really had no business in the app because it would not work for you. It was a bad design but it was third party.
But we couldn't even pop that up because the browsers just tried to slide by any notifications about cookies
They literally explained. Some jurisdictions require them to ask you about cookies but the way some people configure their browser blocks this legally required prompt, potentially exposing them to legal action.
Not just the legal team. Every time there's new legislation like this, a new set of contractors pop up offering to walk your company through what it needs to do to be compliant. Nobody is quite sure what the limits are--and nobody will for several years until court precedents work out the issues--so those contractors are going to tell you to assume the worst case interpretation.
PCI Compliance (technically a contractual obligation rather than legal), Sarbanes-Oxley, and GDPR were good things, but all of them spawned a sub-industry of grifters.
The California stuff still has yet to play out in courts but the European law covering it was actually pretty significant. And it was enough of a pain in the ass that they recently said they're going to repeal it.
Just switched back to FF for the first time in years. Have to say, it's helping me de-google quite quickly because they're such bastards about playing nice with other browsers.
With how MS Teams and now CNN have been reported here to be blocking Firefox, you know that Firefox is doing things right. If web giants are ganging up against it, it's all the more reason to switch to it to make a statement and prevent big tech from making privacy violation the norm.
TBH There should be more RSS feeds and more work around them (RSS readers are still good tho) so that news are delivered without paywalls and in a user friendly way
I've been getting back on the RSS train in the past year or two, after dropping off when I started getting all of my news on Twitter. After that was proven to be a terrible idea, I discovered that my Feedly account was still there waiting for me. I'll be self-hosting something else soon, but my post-Twitter, federated, RSS-driven media consumption has so far given me a lot more control.
there's that one US medical website that often comes up at the top of google searches and when you select "only necessary cookies" it tells you to fuck off basically lmao, something about "european privacy" or something
It's not the web developers making the decisions, but marketing and management. Otherwise websites would respect "do not track", or have an "opt out of all cookies" button instead of an "accept all cookies" button.
CNN has been shit since 10 years ago. Their apogee was the first Gulf War and it has been down hill since then. Unironically, go to Tiktok if you want the latest happenings, usually right as it happens by the people it is happening to.
They're talking about GDPR cookie consent notices, which let you opt-out of advertising cookies and only accept required cookies (for user session, so that it can tell you're logged in). The ad blocker is blocking the consent notice itself.
Just tried using only Firefox and uBO, that link and the main page load correctly first time and on refresh. Checked with default filters only and default plus annoyances and both were fine. Do you have any other ad blocker / content filter running at the same time?
I still use chrome for the moment with AdAway on mobile, adblock on PC... I accidentally went to CNN the other day with adblock turned off... my God, have you seen it lately? It's a god damn hell scape.
No, it doesn't. The banner is only needed for you to accept the cookies. It's completely fine to just block the banners or not show them, just the user can't accept the cookies, so CNN can't use them.
CNN would rather block the user than lose out on the chance to save those cookies.
The Cookie Law requires users’ informed consent before storing or accessing information on user’s devices.
This means that if you use cookies you must:
inform your users that your site/app (or any third-party service used by your site/app) uses cookies;
explain, in a clear and comprehensive manner, how cookies work and what you use them for;
obtain informed consent prior to the storing of those cookies on the user’s device.
In practice, you’ll need to show a cookie banner (also called cookie notice) upon the user’s first visit, implement a cookie policy and allow the user to provide consent – unless your website uses solely exempt cookies, which is highly unlikely. Prior to consent, no cookies — except for those exempt — should run or be installed.
You’ll need to show a cookie banner upon the user’s first visit, implement a cookie policy and allow the user to provide consent. Prior to consent, no cookies — except for exempt cookies — should be run or installed