Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Messages - Arantor
3121
Features / Re: Users Online Today
« on June 15th, 2012, 02:44 PM »
You have access to the repo :P In various stages of working so they might need to be tested offline first.

The repo is in the same place as Wedge's repo except the URL ends in arantor_weplugins instead of arantor_wedge. All users who have access to the main repo have access to the plugins repo.
3122
The Pub / Re: The Cookie Law (in the UK at least)
« on June 15th, 2012, 12:35 AM »
Apart from the fact that the ICO considers SMF's (and Wedge's) cookies beyond what is reasonable, (putting aside the privacy implications of Who's Online) the fact that the registration agreement is only barely acceptable and that in the UK, officially forum owners are actually supposed to register with the ICO for being data controllers... yes, apart from those tiny details, it's fine.

Go back and read the letter I sent them and their response. Even though I actually pointed out to them that SMF's default registration agreement does mention cookies.

Oh, and SMF's registration agreement etc. definitely does not extend to the likes of Google Analytics, which are so far beyond what is acceptable without work that it isn't even funny.
3123
The Pub / Re: The Cookie Law (in the UK at least)
« on June 15th, 2012, 12:26 AM »
Oh, don't get me wrong, I'm well aware that the whole implementation of the cookie law is farcical. But it's making site developers go back and think about the cookies that are required and consider whether that feature is necessary. For me, that's a huge deal, because it's encouraging developers to take some responsibility - and it's making site owners do the same, which is a great thing, even if for the wrong reasons.
Quote
I don't think making people plaster ugly banners on their sites protects privacy.
It doesn't. But informing users of how their information is being used can do because it gives them the power to understand what their data is being used. I just wish it were more driven by site owners wanting to take that responsibility without having to be strong-armed into it in any fashion.
Quote
Rules about what you can and can not track would be better suited, but then again that would take real courage on the legislators part, so that shit ain't happening.
This is actually why I railed about people not reading the laws as written and relying on third party reporting on the subject. The laws are about making site owners review their software and making a judgement about things. It starts by asking 'do you need to track anything' rather than presuming that tracking is actually required.

Even a session cookie is not really required, except for analytical purposes. But would anyone think about that aspect without a review like this being put under peoples' noses?
3124
The Pub / Re: The Cookie Law (in the UK at least)
« on June 15th, 2012, 12:04 AM »
Let's see.

1. It is an EU law, yes. It is likely to be implemented in a similar fashion in the US.

2. The plugin architecture makes this awkward but not impossible to deal with.

3. There are a very large number of related matters. Even if this law does not affect you, it is still good practice to review the state of play and actually be at least partly compliant, in at least as much as reviewing what cookies the site uses and being able to justify those to users. Are you saying that you are not accountable for the software your site runs? Are you saying that you do not care about the privacy of your users?

While I dislike the way such implications can be thrown about, it is something that should be considered, whether you are required to comply by law or not. What cookies does your site issue? Do you need them? Are you actively, passively or secretly analysing your users? Are you allowing that data to be shared with third parties deliberately or accidentally?

These are things that reviewing the site and its software would bring. You as a site owner are responsible for what your site does, burying your head in the sand to these issues does not absolve you of that responsibility.

Just because you may not be subject to a law trying to protect privacy, does not mean you shouldn't try to protect their privacy!
Quote
I'm interested in the fact that Ie10 generated backlash because people think that since it enables DNT by default, websites will decide to turn it down. However, what makes one think that they wouldn't turn it down either way? Spammers don't care about laws anyway...
Who has a vested interest in DNT not being implemented? Who has a browser that does not support DNT as set out in the specification at this time? Who is also a member of the W3C? (The answer is one and the same, and it isn't Microsoft.)
3125
The Pub / Re: The Cookie Law (in the UK at least)
« on June 14th, 2012, 11:50 PM »
-sigh- Then nothing I've said has been worth the effort of thinking about it.
3126
The Pub / Re: The Cookie Law (in the UK at least)
« on June 14th, 2012, 09:57 PM »
For once that wasn't about me! :lol: That was in reply to Kindred, who it seems is even more cynical and weary of humanity than I am, which takes some doing.

Stupidity = lack of intelligence, but the problem isn't a lack of intelligence, it's a lack of knowledge and people taking responsibility, and people being given the tools to be able to take responsibility without having to become experts in the subject.
3127
The Pub / Re: The Cookie Law (in the UK at least)
« on June 14th, 2012, 08:39 PM »
You know me, I'm the first to think ill of users :P But I dispute the validity of 'stupidity'. It is not stupidity, it is a lack of education on the subject. I would argue that it is the user's responsibility to understand some of what their computer is doing, much as I would imagine any driver should be aware of really common faults and things that shouldn't be the case on a car, even if they can't strip the engine and rebuild it themselves. THAT, I will argue, is stupid.

That at least is the way I see it for regular users. They do not take responsibility for the way things work that they have control over; those who care already did something about this.

Now, lawmakers. I don't have a lot of faith in lawmakers as far as legislating the internet goes. I don't have much faith in this law for example, other than the fact that it directly affects me to have to deal with it. It is because these people do not understand how the internet works and assume that 1) it is a single united entity and 2) laws can be applied equally everywhere. Of course neither of these are true, and the lawmakers end up screwing something up even if it is with the very best of intentions behind the law.

This law, however ill-implemented it may be, is designed to protect user privacy. DNT and similar measures also put user privacy at the front, though are implemented by people who at least understand some of how the systems work, but even DNT and ilk are flawed because again they put the onus on the developer/site owner.

I'm fully of the belief that there are stupid laws. Most of what comes out of the DHS seems to be flawed, especially with the likes of the TSA... the effectiveness of the measures of actually detecting anything contraband aside, it's guaranteeing that the terrorists win, because now the terrorists do not actually have to do anything and yet everyone is running around on alert and implementing all these measures, which will never be tripped; it's all shutting the gate after the horse has bolted.

Getting down to the point about informing users, informing users is a good thing however you slice it. You're taking responsibility for your end of the bargain, it's not your problem whether users don't bother to read such things. That's one of the flaws with this law is that it's educating users to just click yes, just like Vista/UAC did. You can lead a horse to water, etc.

But if users have access to that information - something not widely normally available - they can make a decision whether to accept cookies or not, or even set up some exclusion rules should they so desire. It's giving the choice and responsibility to the user. You can't make them take that responsibility. But I believe you have to give them the tools to do so - and without laws like this (or, hopefully, better thought out ones), there will never be any reason for site owners to be accountable other than what they 'feel' is right.
3128
The Pub / Re: The Cookie Law (in the UK at least)
« on June 14th, 2012, 07:38 PM »
I think most of the people arguing in this thread don't actually understand what the wording of the laws involved actually are.

The point, amongst other things, is for you to look at what your site is doing and make a judgement about it. The session cookie is 'probably' OK. cookies for other things like the upshrink are also 'probably' OK because you can make a reasonable defence about those, even though it's pretty tenuous and against the letter of the law.

The thing is, I'd argue that at least doing the review of what cookies is involved is not only a good practice, it means you can show accountability for what your site is doing. It's good practice, it's also taken responsibility for what your site is doing. Is that, at least, not a good thing to do?

Or are you also of the school of thought that what your site is doing is not actually your problem?
3129
The Pub / Re: The Cookie Law (in the UK at least)
« on June 14th, 2012, 07:13 PM »
The argument is that a plugin should be created similar to the one in SMF by Emanuele, except that it's a bit different as it's not possible to modify core behaviour like that with a plugin, meaning we pretty much have to do it in the core - though we can leave it disabled by default.
3130
The Pub / Re: The Cookie Law (in the UK at least)
« on June 14th, 2012, 06:59 PM »
Yup, DNT also requires site owners to take action, so even if that gets implemented [1] it *still* requires site owners to actually do something about it.

So, again, brushing aside such measures either indicates that either you actively don't care about (or want) users to have privacy (e.g. for better advertising!) or you actively do not want to take responsibility for what your site is doing. Neither is particularly good for site owners.

I would also note that I consider Google Analytics to be not just invasive but flat out unethical.
 1. Noting full well that the W3C has actively said yesterday it should be off by default even though IE10 turns it on by default.
3131
Off-topic / Re: The June Bug Bundle - Indie Royale
« on June 14th, 2012, 06:48 PM »
Do note that unlike the Humble Bundle and similar, this one doesn't come with donations to charity IIRC.
3132
The Pub / Re: The Cookie Law (in the UK at least)
« on June 14th, 2012, 06:47 PM »
Quote
In the case of RFIDs embedded into machine-readable Passports, this was a requirement originally imposed by the US Department of Homeland Security which required machine-readable Passports to be used by all non-US citizens those entering the US.
Yes, I had a debate with the passport people about this. And yes, this is exactly why it was implemented, not for EU or rest-of-world benefit.
Quote
I don't see the connect between the Cookie Law and threats to freedom of speech. The Cookie Law is all about protecting an individual's privacy.
It's actually a strawman of sorts. The Cookie Law is being suggested as being the tip of an iceberg whereupon setting a site up will require permissions and increasing amounts of legislation. But right now most of the laws do not have any coverage of online behaviour, at least not thoroughly.
Quote
Just to make you feel even hotter "under the collar", the European Commission is likely to issue a new Directive one day quite soon to strengthen the existing privacy and data protection laws. I have seen a draft of the new proposals which includes mention of the use of local storage and web beacons as well as conventional and flash cookies as means to track internet users.
Actually, the wording of the current directive does reference - but only indirectly - local storage and flash cookies. The wording is sufficiently vague that it could be construed as covering those things, however do note that there are side benefits to their implementation that make them slightly 'better' than conventional cookies as they're not quite so heavily broadcast as regular cookies are.
3133
The Pub / Re: The Cookie Law (in the UK at least)
« on June 14th, 2012, 06:41 PM »
Quote
Setting cookies are no different then RFID's, how is it they are trying to frown on one and not the other. IMHO this law is BS and I still believe if any consent should be done it should be done on the client end and not the server.
Actually if you read the laws it's not exactly about using cookies. It's about using methods to track users, of which cookies is the most well known and most entrenched. localStorage is mentioned indirectly but because it's not sent automatically every request it's actually much less of a threat.
Quote
We are delivering content, we shouldn't be responsible for figuring out these stupid cookie laws.
Read the laws. You're responsible for the data you're sending. Is it wrong that you should be reasonably accountable for the data that you have control over? That's really what we're arguing about here: the right of site owners not to be held accountable for what data is collected about users. Why should you have that right?
Quote
What we are going to do soon read a 1,000 page manual of all the laws of the internet just to set up a personal webpage. Talk about some real treats to freedom of speech.
While I understand your sentiment, I'm not opposed to *some* regulation, handled sanely. The web is a wilderness as it is, and frankly it would do some good for some proper sane regulation, but no-one can be trusted to enforce it without the inevitable cries of censorship.

What is freedom of speech? Does the right of freedom of speech entitle you to publish content banned in some countries? Is freedom of speech a legitimate defence for 'child porn'? Before campaigning for freedom, you would do well to understand what the flipside of having those freedoms is.
Quote
So would I like to see it as a software solution? I have to be honest here if a software is built around this then IMHO it isn't worth installing. If a software has this as a portion of it it must be configurable and not interfere with the software if disabled. Mainly this is worthy of a plugin and not a core component.
Now you understand my dilemma. I AM IN THE UK, I HAVE TO CONTEND WITH THIS LAW. But not only do I have to contend with this law for my own stuff (which I haven't yet, I would add), Wedge has a responsibility to deal with it too.

But more importantly, as a site owner you have to be responsible about the data you're sending. Is that really such a big deal for you? What the hell happened to accountability and taking responsibility?

Why are so many people wanting to avoid having to take some responsibility for what they're doing? Why, also, are there so many revolutionaries that are all talk and no action? I hear an awful lot of people that want to stick it to The Man, but I don't see anyone much actually doing anything about it.
3134
The Pub / Re: The Cookie Law (in the UK at least)
« on June 14th, 2012, 05:49 PM »
Yes, that's right, ignore the crap out of it until the rest of Europe implements it. Is it then something to ignore? What about when the US inevitably introduces something similar?

Will you be so brave about ignoring it then?

The other thing is that the plugin architecture is not as flexible as SMF, mods cannot modify any line of code they choose, so making this a plugin is at least as difficult as it is in SMF, and possibly more so.
3135
The Pub / Re: The Cookie Law (in the UK at least)
« on June 14th, 2012, 03:28 PM »
As far as the DPA goes, they're not considered personal information. But I agree that something should be shown to guests when posting.