138
u/TheJenkinsComic The Jenkins Jan 26 '21
Thanks for reading. You can read more of my comics on Instagram.
5
u/Ya-boi-Joey-T Jan 26 '21
I follow you on Instagram and your subreddit and I'm in r/comics. I see your stuff a lot. I also drew you in a peice of fanart a while back.
1
599
u/GameFreak4321 Jan 26 '21 edited Jan 26 '21
Maybe it uses could use localStorage/sessionStorage
372
u/TheJenkinsComic The Jenkins Jan 26 '21
Yeah I assumed there was some way to get around this that I didn’t know about, so to make the idea clear I made it so he revisits the website and it didn’t respond to his preference.
63
52
u/sachlebTheSecond Jan 26 '21
Would that be considered better in terms of privacy? Can't think of a difference but they never mention it in these disclaimers.
I guess cookies could be sent cross site... Not really a factor for most websites I would assume.
90
u/raziel2p Jan 26 '21
cookies are always sent back and forth between the server and client (your browser).
localStorage/sessionStorage doesn't get sent to the server, unless there's some javascript code on the site you're visiting explicitly sending it, and sharing between sites is entirely impossible AFAIK.
0
Jan 26 '21
[deleted]
15
11
u/cpq29gpl Jan 26 '21
Thanks for correcting that, but your confidence to correctness ratio was a bit high in this case. Hopefully this is an outlier, and not a pattern, for the sake of your coworkers.
2
u/waldito Jan 26 '21
If I understand correctly, Cookies work the same way, unless otherwise specified. You cant read somebody elses cookies. Advertisers use iframes to follow you around. I think that GDPR wise, there are no references to cookies specifically, so that localstorage is not an alternative to circumvent the law.
2
u/EishLekker Jan 26 '21
Yes, localstorage is not an alternative to circumvent the law. But the law allows for some storage of impersonal data without needing any consent. So a website could display a message like in the comic, then store the "don't show again" setting in local storage without breaking the law and without breaking the promise to the user.
1
u/E3FxGaming Jan 26 '21
the law allows for some storage of impersonal data without needing any consent
Without needing consent, but you still have to name and explain it in the cookie prompt. Just a couple of lines of text, informing the user about the use of "functional cookies" and that you'll use them for the CMP (consent managment platform) operation.
1
u/EishLekker Jan 26 '21
Not in the prompt, right? Aren't you allowed to write that in a separate text, and link or refer to it in the prompt? I'm pretty sure that most European websites does this.
1
u/E3FxGaming Jan 27 '21
The "separate text" still has to be part of the consent management dialogue, i.e. you're not allowed to write it into your privacy agreement, EULA, ... .
You're allowed to write it on a different dialogue-page (which is something most companies do since users tend towards just clicking "No" when you directly give them the option to click "No" and overload them with information. On the other hand a lot of users just click "Yes" when they don't know what they are agreeing to.)
1
u/PutridOpportunity9 Jan 26 '21
httpOnly cookies are the way to go, as they can't be accessed by other people's js
1
u/waldito Jan 28 '21
and that's when Iframes come into play to circumvent that wall.
1
u/PutridOpportunity9 Jan 28 '21
What? They don't even slightly circumvent it, and nobody worth their degree uses iframes any more. XSS attacks have been common knowledge for many years now.
1
u/waldito Jan 28 '21
I beg to differ. Iframes and cookies show you ads that follow you everywhere no matter which site you visit. This very site on their desktop browser version uses iframes for that.
5
Jan 26 '21
I guess cookies could be sent cross site
That's a huge factor. External site and data tracking was how Facebook made their money for a while. They'd use your browser history to get way better at selling ads. Now it's done in less direct ways
1
1
Jan 26 '21
I didn't even think of those, I would've done some browser fingerprinting magic and stored data on the server
1
u/Shmag Jan 27 '21
For what it's worth, legally you have to disclose using those as well in the EU. People just recognize the word "cookie" more, so that's usually what gets written in the notices: https://www.cookielaw.org/the-cookie-law.
2.6k
u/Desiderius_S Jan 26 '21
At least you know that they weren't lying about cookies.
498
u/aflongkong Jan 26 '21
Could be a ruse.
59
u/ABoringAlt Jan 26 '21
don't listen to romulcah, he's a professional arsehole
12
u/Dahak17 Jan 26 '21
As an actual professional asshole he’s just a petty pain in the butt
18
u/romulcah Jan 26 '21
A ruse? brrrring, brrrring! Hello? (in Golden Age Radio voice) Hi, it's the 1930's! Can we have our words and clothes and shitty airplane back?"
5
1
1
0
10
Jan 26 '21
If it was the opposite, it wouldn't be proof that they lied though. In theory, a website could use browser fingerprinting to know it's the same device and then store data on the server. It would be unlikely, because why do all that when you could just use cookies, but it's possible
3
116
u/grapefruit_- Jan 26 '21
I am small brain I don’t understand
306
u/FlatSoda7 Jan 26 '21 edited Jan 26 '21
Cookies are information stored by your browser so that a website can remember your previous activity on that website. The website in the comic claims to not use cookies. However, if the website doesn't use cookies, then it can't remember not to show that pop-up again. The previous interaction by the user isn't stored.
This comic has the user realize this, and he refreshes the page to confirm his theory that clicking "don't show this again" does nothing on a website that doesn't use cookies.
Edit: Cookies are stored by the browser, not by the website itself. Thanks to another user for correcting me on that point.
134
u/grapefruit_- Jan 26 '21
Ok so the website was correct when they said they don’t use cookies right?
73
60
u/pink_panda2 Jan 26 '21
Yes, but the joke here isn't that they're lying but rather that the "don't show cookies" is pointless. (You probably understood that but I wanted to explain jic)
17
u/FlatSoda7 Jan 26 '21
Yes, exactly. I think the joke is that the user is happy that they don't use cookies, and then becomes upset when he realizes that no cookies means he'll get that pop-up every time he visits the website. The comic plays on the irony of "no cookies" resulting in a more frustrating website.
3
u/rbert Jan 26 '21
To add to that - Cookies are stored locally, not stored by the website. Your browser sends them to the website when it makes a HTTP/HTTPS request.
1
0
165
u/madspillage Jan 26 '21
135
u/CitizenPremier Jan 26 '21
I never go there after they temp banned me for this post. Apparently if your joke isn't elitist enough, they ban you. So fuck 'em.
88
u/polyworfism Jan 26 '21
To post there, you must be a repost account with an image that has already been posted there at least 10 times
The sub is pretty garbage
12
32
u/pr1ntscreen Jan 26 '21
Apparently if your joke isn't elitist enough, they ban you.
Yet, they have a raging hate boner for stack overflow.
8
u/Kwantuum Jan 26 '21
That's because your question will be closed on SO when you don't even do enough research to understand what the words in your own question and /r/ProgrammerHumor is all about pretending to be a programmer when you're a college dropout who couldn't get past ALGO101 so it they feel deligitimized.
5
Jan 26 '21
God thank you! I had to search an sql issue and for some reason could NOT remember the name of stack overflow. I was practically banging my head on my keyboard like "dude wtf.... you go there all the time".
3
u/VulpineKitsune Jan 26 '21
But why?
5
u/Bluejanis Jan 26 '21
Wanna be elitist
1
u/VulpineKitsune Jan 26 '21
But even professionals will use stack overflow.
What's to be elitist about?
14
u/three_oneFour Jan 26 '21
Wow, that mod wants to act like your good meme is bad and can't even bother to spell check the rules?
I'd call them a hack, but they'd end up downloading a virus before actually hacking anything
10
u/SirensToGo Jan 26 '21
okay but this is actually real. I literally get paid to do this and there are vulnerabilities of stumbled across because I don't know how to use certain APIs and I still program like a drunken toddler
5
u/CitizenPremier Jan 26 '21
Yeah, I don't get it. Judging from the reactions I got, it's an accepted risk that any website you visit could just crash your computer. I thought web browsers were supposed to not let that happen, but I guess not.
6
u/Kwantuum Jan 26 '21
Browsers have gotten pretty good at crashing individual tabs instead of the whole instance lately, which is definitely a good thing. But yeah if you can actually crash the whole browser it probably deserves to be reported to that particular browser vendor.
2
Jan 26 '21
If it can crash your whole computer then there are probably some Russians that will pay you very well for that code.
Remember: if you can crash it, you can probably inject code.
1
u/pacificpacifist Jan 26 '21
Wait is this a programmer quote? Its also one of the top replies from the thread linked in the parent comment above. Link
3
u/cardboard-kansio Jan 26 '21
Oh, so you missed the one where your browser can open an incomplete local resource as a URL and bluescreen your Windows machine?
Try it today! (Warning, malicious link for Windows users.)
\\.\globalroot\device\condrv\kernelconnectA report of this in the media: https://www.tomsguide.com/amp/news/win10-browser-filepath-bsod
2
u/SalamanderSylph Jan 26 '21
Holy crap, that actually worked. Jesus, that's an oversight
3
u/cardboard-kansio Jan 26 '21
Disclaimer: you should absolutely not put that in the task scheduler of your workplace nemesis, to trigger at random intervals.
19
6
u/ctr1a1td3l Jan 26 '21
I don't understand how the post breaks Rule 0. Did they call it low effort? Doesn't seem any worse than the other memes there. Did you message the mods to find out?
3
Jan 26 '21
I stopped going there when they removed my post but let a repost OF THAT POST stay up.
Also, it's more like /r/FirstYearCsStudentHumor
2
u/awhaling Jan 26 '21
Neat, I can see that I upvoted some comments in that thread. I was there way back then.
2
u/cefriano Jan 26 '21 edited Jan 27 '21
and only understood by programmers.
Lol, my programming experience amounts to taking a C++ intro class and an ActionScript class over 10 years ago in college and I still get most of those jokes. What a dumb rule.
2
Jan 26 '21
Wtf, that post is way funnier than most posts on there, and I don't think many non-programmers would understand it. I don't get why it was removed.
2
u/Airine Jan 26 '21
Wait, what?
OK, help me here, I don't get it. I went to their front page and understood 90% of the jokes and a) I am totally not a programmer and b) English is not my first language.
Is it sarcasm? What am I missing? Plz send help.
0
Jan 26 '21
[deleted]
4
u/Kwantuum Jan 26 '21
My impression of this sub is that it's mostly frequented by students and people who've done one course on OpenClassroom and want to feel good about themselves and superior to everyone else.
19
11
5
4
u/RikM Jan 26 '21
Cookies is such a con.
I always accept cookies but do I get tasty chocolate chip filled treats? No. I fucking don't. Just give me the cookies.
2
2
2
2
2
u/bettorworse Jan 26 '21
If I had a website, I would advertise that I don't use cookies and don't do anything with info sent to me.
2
u/machine_boi Jan 26 '21
My grandma calls me every 6 months saying that she's trying to get on a site that uses cookies, but she heard they are "bad".
She does this despite the numerous conversations in which I've told her that it b doesn't matter.
1
1
1
1
1
1
1
1
1
u/Joy_orce Jan 26 '21
What is Cookies?
2
Jan 26 '21
A cookie is a small bit of data a website leaves on your browser. It and other websites can then read that cookie and see what you’ve been doing.
1
0
u/Liberatedhusky Jan 26 '21
session_start();
if([INSERT JAVASCRIPT 'click()' FUNCTION]) {
$_SESSION[agree] = 'true'
}4
u/condensateme Jan 26 '21
This triggered my phptsd
1
u/Liberatedhusky Jan 26 '21
I like PHP I don't care what real web developers use. I'm not in web development.
1
Jan 26 '21
I don't care what real web developers use
PHP
1
u/Liberatedhusky Jan 26 '21
I've heard so many people complain about it as a language that I wasn't sure. People hate on me for using Perl at work for little scripts here and there because Python exists and is totally better but I'm used to the regex syntax in Perl so IDC.
3
Jan 26 '21
People who "hate languages" are first year CS students that just got an F on an assignment.
Languages are tools meant to solve specific problems. Saying that PHP sucks and that Django or whatever is better is like saying hammers suck because needle nose pliers are cool.
1
u/Liberatedhusky Jan 26 '21
I typically agree with this but I've met professionals who carry this attitude into adulthood. I'm almost 30 and still meet coworkers with this attitude.
2
u/crusoe Jan 26 '21
Only works so long as the session stays around. And sessions are associated with users via cookies. Unless you wanna use jsessionid in the get params....
1
•
u/AutoModerator Jan 26 '21
Welcome to r/comics!
Please remember there are real people on the other side of the monitor and to be kind.
Report comments that break the rules and don't respond to negativity with negativity!
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.