Slashdot Mirror


Net Marketers Worried as Cookies Lose Effectiveness

Saint Aardvark writes "The Globe and Mail reports that Internet marketers are worried about the decreasing persistence of cookies. Almost 40% of surfers delete them on a monthly basis, says Jupiter Research -- a fact one marketers attributes to incorrect associations with spyware and privacy invasion. United Virtualities' Flash-based tracking system is mentioned as a possible substitute...though they don't mention the Firefox plugin that removes them, or talk in any meaningful way about why people might want cookies gone. Still, the article is a good overview of life from the marketer's perspective."

556 comments

  1. The other side of things. by XorNand · · Score: 5, Informative

    Going to play the devil's advocate here, because I know how most of the rest of you feel:

    I used to be the web architect for a .com a few years ago. I created a custom metrics program that intergrated into into our (also custom) ecommerce application. To track users, I gave them a single, persistant cookie that contained only a GUID. I used this information to determine our converstion ratio (number of visitors to buyers), figure out the top paths through the site, determine percentage of traffic that was return visitors, etc.

    All this stuff was entirely anonymous unless they purchased something from us. But, even then their site history was really only incidently linked to their contact info because we never correlated the data together. Why would I? Knowing that "John Smith" visited our site 3 times a week isn't really any more insightful that knowing that "User #5233258" visited us 3 times a week. The data was only useful in aggregate. For example, knowing that the last page 20% of people visited was our contact page, yet only 10% of those people actually submitted the form would make me reevaluate that page. Maybe the contact form wasn't very user friendly? So, I'd tweak it and then recompare the metrics.

    The whole point of my tracking was to better serve our visitors and eventual customers. I wanted to make it easier for them to do what they came to our site to do. Or it would help us target our advertising for effectively. If a lot of people clicking through from a banner ad we had on Site A tended to buy Widget B, we'd decide to modify the banner ad to specifically highlight Widget B. Maybe my attitude is different than most, but I can't be unique. I never looked down upon our visitors, feeling that I was hearding cattle together to be slaughtered, or at least ripped off. Quite the opposite. These visitors wanted to be on my site, elsewise they wouldn't have dropped by. It felt pretty cool that so many people were coming to a site that I was responsible for managing. These people were supplying my paycheck and I had to make sure that they preffered our site to our competitors'. If a lot of visitors deleted that single cookie I used, that made that job much more difficult.

    Does that still make me evil?

    --
    Entrepreneur : (noun), French for "unemployed"
    1. Re:The other side of things. by garcia · · Score: 2, Insightful

      Cookies are fine for storing login information. If a user wants to keep a persistent cookie to make their visits to my site easier they are free to click the box. If they only want a session ID then they can login, use the site, and leave w/o a cookie.

      Why do companies think that it is important to not tell a user up front that they are going to get a cookie w/o logging in?

      Yeah, they might have been paying your wages and you were just doing your job but I don't see how aggregating statistics need to be done via cookies. Can't you do it through your logs?

    2. Re:The other side of things. by Miros · · Score: 3, Insightful

      I think you make some really interesting points. From one aspect, you are tracking users by depositing information on their computer. While you claim this information could not be used to identify them elsewhere, it's certainly a concern with less careful web developers at the cookie helm. At the same time, you make an interesting point about how a store owner may want to track how their users use their site, what brings them there, and what they look for. If you think of a real store, the owner would certainly be able to do this easily by simply watching the customers (many do, many even ask if you want help to see what it is that you're looking for). Really, without some tracking mechanism like this, web shops would have to depend entirely on user feedback to determine how easily their customers are finding products on their sites, and how many visitors turn into buyers. I think both of these pieces of information can be quite critical to obtaining success.

    3. Re:The other side of things. by Compholio · · Score: 4, Interesting

      Knowing that "John Smith" visited our site 3 times a week isn't really any more insightful that knowing that "User #5233258" visited us 3 times a week.

      Then why isn't user 123.456.789.012 good enough?

    4. Re:The other side of things. by afidel · · Score: 2, Interesting

      If you really ARE looking at agregate statistics then how does deleting the cookie really impact your analysis, other than slightly inflating your unique visitors numbers? I would think that things like best path through the site could be determined from session cookies, no need for them to be sustained. If you want to track return purchasers just associate their account with a cookie and if they return to purchase again just reassign them their original GUID or combine the GUIDs into one trackable metric. I don't think tracking me makes you evil, and in fact if I actually use a sites resources like customizable pages I am unlikely to remove their cookies. I personally only block cookies from cross site marketers that are trying to obtain some kind of privacy invading profile of me and my habits.

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
    5. Re:The other side of things. by killercoder · · Score: 1

      Let me answer.........short answer........no it doesn't make you evil - it makes you lazy.

      The exact same thing can be accomplished without a cookie by evaluting your logs and reviewing what pages are requested in what order from what IP.

      Cookies by themselves are open to abuse by people that don't understand their implications.

      Cookies won't go away, but I refuse to use them

    6. Re:The other side of things. by mikes.song · · Score: 1, Interesting

      The problem is when this info is used to generate a price.

      So you don't know that John visited, but you do know that "User #5233258" visited three times and looked at the same item each time. He must be interested. Lets use that info to charge "User #5233258" 15% more on his fourth visit.

      Oops, he didn't buy. Lets correlate that data and sale it to the government.

      Oops, looks like the hackers already broke in, correlated the data, and sold it on ICR.

    7. Re:The other side of things. by sentanta · · Score: 1

      Keep in mind that it is possible to tie that anonymous cookie back to a real-life customer (with a set-up slightly different from what you described), and that still is not a bad thing if you are visiting a site like New Egg. If they saw that you had been browsing a Digital Camera page, maybe their next direct mail piece will be a coupon for a Digital Camera rather than a Notebook. I understand that there are some disreputable sites out there, but to me helping companies learn a little bit about my interests is a good thing. I am not deleting my Google cookies because they are at least attempting to personalize their search based on my interests; that is exactly what I want these companies to be doing.

      --
      The Big Yuan - tracking mainland China
    8. Re:The other side of things. by temojen · · Score: 2

      I have no problem with one site tracking my motions through their services. What bothers me is services that track me through multiple unrelated sites, some of which have my personal information on file.

    9. Re:The other side of things. by Saven+Marek · · Score: 2, Interesting

      Yes. Simply put, my sense of privacy says that I do not wish to be tracked, in any way shape or form.

      Your presumption that it is OK to do so and that because you want to make your site better you somehow have the right to presume that is arrogant and misled. I'm an anonymous visitor and I wish to remain anonymous. I do not want you recording any information on my IP, me, my browser, cookies, where else I've been on your site and how long I was there. I do not want to be given a customer number or an entry in a database. I do not want you to keep any record of where I go, whatever label you might put me under.

      Disobeying my wishes is disrespecting your customers, and you wouldn't have a returning customer in me.

    10. Re:The other side of things. by Enigma_Man · · Score: 4, Informative

      I have a similar story. I design / manage the website for a company, and we had a reasonably big problem with using cookies for internal "tracking" purposes. Not to track customers in the "evil" way, but just to keep track of things in their shopping cart, and other similar info to what you stated. The problem we had was with people having cookies shut off. At first, we'd just not track them at all, and the shopping cart would ask them to turn on their cookies, and gave some quick directions, and links to detailed directions for different browsers. A lot of people seemed to be totally turned off by this, based on the amount of people that read the instructions and then didn't even start shopping.

      What we ended up doing was using alternate methods for tracking users as they browse around our site, mainly using links with generated tails attached to them that were unique to each visitor. Like, instead of linking to index.cfm in the navigation window, It would be index.cfm?user=5012345, and we'd keep track internally. Obviously this isn't a safe use for a shopping cart type thing, but we used other methods to secure that.

      Mainly, I just wanted to say that there are methods other than cookies that work just as well.

      -Jesse

      --
      Nothing says "unprofessional job" like wrinkles in your duct tape.
    11. Re:The other side of things. by Anonymous Coward · · Score: 1, Insightful

      No it doesn't. I'm gonna jump right in and reply because like the rest of us that have written CGI we have to face the problem of session tracking. When your business requires that the customer give you a lot of information you cant upset them by asking them the same stuff every time they use the site. Some kind of tracking ouside the session is very desirable, nay essential for certain website ideas to work at all without logging in.

      The problem is that we let marketeers get their hands on this technology. Who was the bright spark that told some PHB you could track customers habits and browsing patterns with cookies. Control freaks cant help themselves, cookies have been abused and now we lose them as a tool for serious problem solving. Whatever the replacement, as long as marketeering Golgafrinchans get their mits on it then it will be abused to achieve unsavoury aims and people will disable it. There is no technological problem here, only one of human nature and the lesson of not giving access to powerful technologies to idiots.

    12. Re:The other side of things. by danzona · · Score: 1

      I have to vote that you are more evil than not evil.

      Of all the things you list, the only one that requires you to write a cookie is to be able to say that "John Smith" visited our site 3 times a week.

      How much value does that add to the user? Speaking for myself, I rejected cookies because I felt that any value that this might add was more than negated by cookie abuse.

    13. Re:The other side of things. by Anonymous Coward · · Score: 1, Interesting

      Because user 123.456.789.012 might be 1000 computers behind NAT.

    14. Re:The other side of things. by Anonymous Coward · · Score: 0

      IP address are no good because a number of ISPs use proxy servers unbeknown to the person browsing. Been there, done that. Wasted a lot of time on it :(

    15. Re:The other side of things. by Kjella · · Score: 1

      But, even then their site history was really only incidently linked to their contact info because we never correlated the data together. Why would I? Knowing that "John Smith" visited our site 3 times a week isn't really any more insightful that knowing that "User #5233258" visited us 3 times a week. The data was only useful in aggregate.

      Except then you take your list of customers, and sell those lists for targeted spam (or just a valid address), or let third party sites use that cookie to deliver targeted ads, and you see that this data has value, not only in the aggregate. And the more details (viewing habits, purchase histroy) you have, the more valuable. Many companies saw this and tried to turn a profit on it, at the same time building up what in aggregate is a massive invasion of privacy. To stop that, my cookies expire when I close my browser (except a few perms like my slashdot cookie). Just because you never correlated data doesn't mean others didn't.

      --
      Live today, because you never know what tomorrow brings
    16. Re:The other side of things. by TERdON · · Score: 1

      Actually, it can't. That's not a correct IP. It's correct form is x.x.x.x (as above), where x255 (not as above).

      --
      I have a really elegant proof for Fermat's last theorem. If this sig was only a bit longer...
    17. Re:The other side of things. by digidave · · Score: 2, Informative

      Congratulations on inventing a less useful form of session variables :)

      --
      The global economy is a great thing until you feel it locally.
    18. Re:The other side of things. by Loonacy · · Score: 5, Funny

      Because IP addresses don't go that high, duh.
      (Although I completely agree with the general idea.)

    19. Re:The other side of things. by Enigma_Man · · Score: 4, Informative

      user 17.123.23.5 might be 30,000 computers, that's why. IP addresses are not a good way of tracking individual users because of network routing / NAT etc.

      -Jesse

      --
      Nothing says "unprofessional job" like wrinkles in your duct tape.
    20. Re:The other side of things. by zx75 · · Score: 2, Insightful

      Ok, you're obviously running a site that is not insignificant if you have an eCommerce application, GUID numbers and tracking individuals as they visit different pages. There are other ways to do this outside of cookies that gather non-aggregated data without putting anything on the user's machine.

      The simplest example I can think of is one Java based web application I was one of the deveopers for. We had to deal with secure logins, we had eCommerce and a variety of other things that are mostly irrelevant. But the big thing was intercepting more than one person attempting to login with the same id, as well as session timeouts. This was further complicated by the fact that we had certain pages that users were expected to go to, and spend 10-20 minutes reading without generating another page hit.

      So what we ended up doing was correlating IP addresses, user ids and page identifiers along with timestamps to track a user through the site by way of session level Java Beans and validate if a user had timed out, if it was the same one attempting to log back in after exiting their browser in a way that didn't terminate a session, or another IP attempting to log in to a busy account.

      This info was stored on the server side, and from it we could assemble user flow and page use statistics without ever using a cookie or piece of Javascript.

      And before anyone says anything, yes we did have strict privacy policies and agreements in place with our clients since access to the application had to be purchased in the first place.

      --
      This is not a sig.
    21. Re:The other side of things. by justforaday · · Score: 2, Funny

      Because obviously somebody is spoofing their IP address...

      --
      I'll turn into a supernova and burn up everything. Well I'll turn into a black little hole and you'll turn into string.
    22. Re:The other side of things. by twifosp · · Score: 1
      I used to do almost the exact same thing you are describing. I didn't alter the web pages at all, but I ran the metrics and statistics piece from the data we collected. Luckily, most of our users opt to create a login for the benefits it gives them when browsing our site. I say luckily because it also helps us track them and produce metrics that make their lives easier. For the customers who don't have a login, we'd still generate a session guid and create a cookie. I later found this data to be bogus because over 20% of the non logged in users actually were the same customers not getting caught by the cookie due to cookies being deleted ect. But either way, it helps us help the customer.

      I worked on the metrics for both the support and sales end of our page. Using the login and cookie data, I was able to construct probabilities to fail out of the website. We then designed easier portals and linking structures. We completely rethought the way customers used our website and increased support article fixes (as deteremined by "did this solve your issue" survey on the website) by over 40% and decreased the amount of sales browser drop outs by something like 10%.

      All chalked up to a site redesign... which means users were frusterated with our design, which we fixed by examining their habbits, failure points, and data.

      I also know that the same data my team used to help them, is also tracked in our marketing databases to offer dynamic content in order to have a higher chance of appealing to make subsequent sales. They even do things like IP location look up to see where you live and what type of products to offer you. You can still buy all the same products, but the order is changed to reflect your areas demographic. So it's not ALL good usage of this data, but marketing is marketing.

      It's both good and evil, but without measuring who and how people use websites, they are tough to improve. Not only that, but they are tough to PROVE you've improved them without managing metrics and statistics.

      At any rate, I think leaving cookies on by default helps the situations more than it hurts it. So what if people use it to try and make a buck... the consumer ALWAYS has the right to 1. disable the passing of the information and 2. to not buy from any medium which requires them to reveal more information than they are willing.

    23. Re:The other side of things. by Gaewyn+L+Knight · · Score: 2, Insightful

      Web proxies and NAT

      I would bet 50% or more of the current web traffic is aggregated behind those 2 items. Makes IP based tracking useless.

      --
      Telcos have alot of dark fibre in the States. Most people assume that's optical fibre...but it's actually moral fibre.
    24. Re:The other side of things. by Eric+Giguere · · Score: 1

      there are methods other than cookies that work just as well

      Indeed, session tracking without cookies is quite easy, see No Cookies Required for an example, and obviously useful for things like shopping carts. Most people probably don't mind session tracking via cookies. It's the permanent cookies that are more problematic.

      Eric
    25. Re:The other side of things. by Compholio · · Score: 1

      Because IP addresses don't go that high, duh.

      Lol, yeah - 456 and 789 are greater than 255 huh? How about...
      0123:4567:89AB:CDEF:0123:4567

    26. Re:The other side of things. by Turn-X+Alphonse · · Score: 1

      But you forget. For every 1 of you theres 50 guys who are the opposit.

      --
      I like muppets.
    27. Re:The other side of things. by Yaztromo · · Score: 1

      Let's re-use your position as part of a hypothetical bricks and mortar department store we'll use for the sake of argument. This store wants to keep track of how many unique visitors go to each department, how much time they spend there, what displays they're spending the most time looking at, how long they wait in line at the checkout and complaints department -- basically the same sorts of activities you want to track through your website.

      Would you want to shop at a store where every time you walked in someone at the front door slapped a sticker on your back, with some sort of unique ID number? Sure, you'd still be anonymous, and yes, perhaps you would be helping the store do a slightly better job or serving you -- but at a cost to your personal dignity, privacy, and security.

      And presuming for a moment you'd actually be okay with wearing that sticker on your back while inside the store, would you feel anything for the stores management when they started to complain about how people were taking the sticker off their jackets when they left the store? Would your attitude be "Oh those poor store managers", or would it be more akin to "Screw them, I'm not walking around with a big sticker on my back everywhere I go!" (especially if that sticker was using some sort of super glue that made it difficult to easily remove from your favorite leather jacket :) ).

      Cookies are way overused. I agree that they have been vilified in the general public -- but that's a result of too many instances of cookies being abused by retail outlets and advertisers. It's the fault of websites akin to your own (and note that I'm not specifically blaming the site you helped build -- its cookie use could indeed have been completely innocuous) that people feel the need to block or delete cookies on a frequent basis (myself included).

      So we can't blame the users on this one. It is they who are being inconvienenced, and one of the rules of business is that you shouldn't go around inconvienencing your customers just because it's convienent for you (that being the royal "you", and not necessarily you in particular).

      Yaz.

    28. Re:The other side of things. by dgatwood · · Score: 2, Insightful
      Yeah, they might have been paying your wages and you were just doing your job but I don't see how aggregating statistics need to be done via cookies. Can't you do it through your logs?

      Nope. Thanks to the prevalence of proxies, log data should be considered nearly useless.

      --

      Check out my sci-fi/humor trilogy at PatriotsBooks.

    29. Re:The other side of things. by Enigma_Man · · Score: 1

      I didn't invent them, that's one way how session variables can be implemented in the (shoddy) web scripting language we use (coldfusion, blah blah gag). The other (default) option is by using cookies to store the session variables, which is what had to be changed.

      -Jesse

      --
      Nothing says "unprofessional job" like wrinkles in your duct tape.
    30. Re:The other side of things. by Evro · · Score: 1

      Then why isn't user 123.456.789.012 good enough?

      Oh, that's easy.

      #1: Dialup users without semi-static IP addresses.

      #2: AOL's enormous proxies.

      --
      rooooar
    31. Re:The other side of things. by Anonymous Coward · · Score: 0

      You call it "entirely anonymous" but by your own words (in the exact same sentence) it's completely the opposite.

      "All this stuff was entirely anonymous unless they purchased something from us. But, even then their site history was really only incidently linked to their contact info because we never correlated the data together."

      So, it's "anonymous" unless you happen to actually look at the data... nice try.

      It is possible to develop truly anonymous systems for tracking trends and traffic paths, but this is more difficult -- and in my personal experience as a developer, companies are not interested in paying for the privacy of their customers.

      I've been personally involved in projects where personal medical information was being collected, and nobody in the organization was interested in privacy except as a way of protecting themselves -- and even then, only to the degree that it had a net benefit for the organization.

      "The whole point of my tracking was to better serve our visitors and eventual customers."

      This is standard marketspeak for "to make our business more successful." You don't get a free pass to violate privacy just because you "did it for the good of the customers."

      And yes, all of the examples in your post could have been performed using a truly anonymous system, but presumably you and/or your employer were not interested in that effort.

    32. Re:The other side of things. by bigpat · · Score: 1

      Does that still make me evil?

      I'll bite. No, wanting to track your visitors is not evil. Subverting their wishes by using flash to get around user preferences about pop-up ads and cookie settings is evil.

      If I choose not to allow cookies to be set that wish should be respected, if you in turn choose not to let me view content I should respect that as your decision as well. If I choose not a allow pop ups, then marketers should not subvert my wishes by using flash pop-ups or exploit some javascript hole. Depending on the type of hack used, then it is not only immoral, but quite likely it is an illegal access of my computer if anyone actually took the time to prosecute it.

    33. Re:The other side of things. by phasm42 · · Score: 1
      Let me answer.........short answer........no it doesn't make you evil - it makes you lazy.

      The exact same thing can be accomplished without a cookie by evaluting your logs and reviewing what pages are requested in what order from what IP.
      Fuck the karma, I wish I could reach through my browser and smack the back of your head for making such an ignorant comment. Many people have enumerated the various reasons that one IP does not map to one computer. And if you're personalizing a site, you definitely can't do it by IP, and adding session ids to the URL is just irritating as fuck.
      --
      "No one likes working in a hamster wheel, and your shop smells of cedar shavings from here." - TaleSpinner
    34. Re:The other side of things. by chris_mahan · · Score: 1

      Persist to database, use username/password with session cookie. Use session-variable, generated directory, etc.

      --

      "Piter, too, is dead."

    35. Re:The other side of things. by OhHellWithIt · · Score: 1
      But, even then their site history was really only incidently linked to their contact info because we never correlated the data together.

      That's the issue for me. I don't mind a company keeping track of whether I come back to their site and whether I buy stuff from them, nor do I mind them attempting to count unique visitors. The problem is that there are too many companies that do correlate information, and they share it with other companies. Not knowing whom to trust, I periodically delete all my cookies and block the domains (such as Doubleclick) that assist them in correlating the information.

      I see a crying need for a browser plug-in that allows one to mess with marketers. Maybe like peer-to-peer sharing of unique cookie IDs.

      --
      "Who controls the past controls the future. Who controls the present controls the past." -- George Orwell
    36. Re:The other side of things. by Mr.+Shiny+And+New · · Score: 2, Insightful

      If the task were possible by using logs, would that make it ok? I don't really see the distinction: Using a cookie to track a user for aggregate data is bad, but using logs to track a user for aggregate data is ok?

    37. Re:The other side of things. by HermanAB · · Score: 1

      Exactly - and why don't they track things in a server side data base? I know Dynamic IPs change from time to time, but that should not affect the aggregate.

      --
      Oh well, what the hell...
    38. Re:The other side of things. by chris_mahan · · Score: 1

      I'll reply to self because I had a thought: "Do we have to say this in 2005? This is not 1997 anymore... "

      --

      "Piter, too, is dead."

    39. Re:The other side of things. by arkanes · · Score: 1
      Nothing wrong with CF ;)

      It'd be nice if it allowed a little more control over the built in session management though. The cookie it writes is persistent, not per session, and theres no built in way to change that.

      URL session variables suck, though. Any time you can't reliably and safely cut & paste or bookmark a URL, your website is sucking.

    40. Re:The other side of things. by BlogPope · · Score: 2, Informative
      I would bet 50% or more of the current web traffic is aggregated behind those 2 items. Makes IP based tracking useless.

      Better yet, large organizations, (AOL especially but not exclusively), will do a madnening thing with Poxy hopping. User A might come from 3 different IP's during a single 15 minute session, tracking without some form of cookie is almost impossible, and worse yet locking a session to an IP for security fails horrendously.

      --
      My other car is a Popemobile
    41. Re:The other side of things. by xenocide2 · · Score: 1

      I'm not quite sure where you grab that number, but imagine where most of that traffic comes from. Universities and businesses, and maybe a few homes. Businesses, is it very important that we know which employee it was that chose to purchase from the website? And homes, it might as well be the same person, if not the same computer. Universities are a strange beast, but a lot of them have enough IPs to handle their traffic without NAT.

      I wouldn't call it useless, anymore than tracking with cookies is useless because people can change computers or delete them.

      --
      I Browse at +4 Flamebait

      Open Source Sysadmin

    42. Re:The other side of things. by KenBot_314 · · Score: 1

      are you kidding me?
      Coldfusion has session support built in.
      It really bugs me when ppl put down a language without supporting their opinion.

    43. Re:The other side of things. by rcamera · · Score: 1

      a little ironic that the 'no cookies required' page tries to drop a cookie, no?

      --
      Wave upon wave of demented avengers March cheerfully out of obscurity into the dream
    44. Re:The other side of things. by Eric+Giguere · · Score: 1

      Well, it is titled "No Cookies Required" as opposed to "No Cookies Used": cookies are the default and embedded session IDs are the fallback. Cookies are useful when they're not misused.

      Eric
    45. Re:The other side of things. by Gaewyn+L+Knight · · Score: 1

      Ahh yes... but many of the largest ISPs (AOHell for example) run their traffic through proxies... and even worse run them through rotating proxies. A single AOL user in a single session may come from 4 or 5 different IP addresses.

      I'm just glad that users are use to required cookies for login or I would have to slap them back to htaccess style login windows for everything.

      --
      Telcos have alot of dark fibre in the States. Most people assume that's optical fibre...but it's actually moral fibre.
    46. Re:The other side of things. by orthogonal · · Score: 1, Insightful
      "The whole point of my tracking was to better serve our visitors and eventual customers"

      Ok, so tell your customers that: if a cookie isn't accepted, take them to a page that tells them,
      You may have noticed that our site sets a "cookie" on browser. Of course, you can use our site without the cookie being set. Click here to continue without cookies.

      We only use the cookie to allow us to better serve you as a customer. Below, you can read, in clear and unambiguous sentences, the data protection and retention polices that we follow. You can also click a button to set a cookie that tells us not to track you (that cookie is shared by all who accept it, and only aggregate information about what pages on our site they visit is collected). Or, if you agree that accepting a cookie serves you as much as it serves us, you can quickly and easily register a login name at our site. As a thank-you, customers with registered logins get a 10% discount on all our merchandise.

      Again, if you prefer not to be individually tracked, you can accept our "anonymous" cookie or simply refuse all cookies; all of our site will continue to be accessible to you. We want to thank you again for visiting our site, and we hope to earn the privilege of having you as a customer. Thank you, [Business or Site Name].
    47. Re:The other side of things. by SatanicPuppy · · Score: 1

      The only thing you get by not using a temporary cookie (the kind no one disables), is multi-visit data on otherwise anonymous customers. A temporary cookie will tell you all the same stuff about throughput without opening up the privacy concerns of persistent cookies.

      I look at it this way; if I want a site to have persistent data about me, I'll create a login, and they can track it forever. Otherwise, it's none of their damn business.

      The data isn't terribly useful to them anyway, because when you stretch visitng patterns out that far it becomes extremely difficult to get meaningful conclusions out of the data, other than "Customer F4579EDA likes pork products" and other such crap.

      --
      ad logicam Claiming a proposition is false because it was presented as the conclusion of a fallacious argument.
    48. Re:The other side of things. by phasm42 · · Score: 1

      1. IPs don't have to stay the same through a session. AOL is an example of this.
      2. Multiple people can come from one IP. NAT is an example of this
      3. Page flow is not always linear, especially if people use Open-in-new-window or the Back button.
      Either your application was very insecure/unreliable or you were using cookies. Without at least session cookies, you have to rely on unreliable methods or encoding the session id in the URL, which is bullshitty way of handling sessions.
      Seems like a high price to pay to say you didn't use cookies. Or maybe you did and just didn't realize it.

      --
      "No one likes working in a hamster wheel, and your shop smells of cedar shavings from here." - TaleSpinner
    49. Re:The other side of things. by lbyx · · Score: 1

      " I don't think tracking me makes you evil, and in fact if I actually use a sites resources like customizable pages I am unlikely to remove their cookies. I personally only block cookies from cross site marketers that are trying to obtain some kind of privacy invading profile of me and my habits."

      Exactly. My browser prompts me for all cookies, and it's funny how often I go to a site like http://cnn.com/ and start getting prompts for cookies from all kinds of ads.*.coms. Did I go to visit ads.mediaplex.com? No, I went to feed my feeble American mind with some media hype, thank you. It is these cookies that worry me. It's like going to the book store and having some smelly bum follow me out and around the block to see which store I go to next, maybe back to my car to see what kind of car I drive, etc... Maybe I like the color blue, maybe I like fast cars, maybe I like pr0n, maybe that damn bum should stop following me every where I go. No thanks to that cookie. I believe it is these cross-marketers that are feeling the pinch, and I really couldn't care less.

    50. Re:The other side of things. by mikeswi · · Score: 1

      I don't think anyone considers that to be evil at all. The problem is not with cookies from the web site being visited. The problem is with cookies which are set by third party ads. Many people do not want a DoubleClick server to record their surfing from site to site. So they "opt out" by removing or blocking the cookies.

      In the end, this is my machine. I decide whether or not I want to keep a file someone else placed on it.

    51. Re:The other side of things. by phasm42 · · Score: 1

      This is a stupid analogy. Putting a cookie on your computer is not like getting a sticker on your back. It's like saying that every time you go to the store, a bunch of advertisements for the store's products appear in a pile at your house. That's what the browser does when it caches the site's content every time you visit -- the ads and pictures of products are stored on your computer. But it's a flawed analogy, because they're really nothing alike.

      --
      "No one likes working in a hamster wheel, and your shop smells of cedar shavings from here." - TaleSpinner
    52. Re:The other side of things. by LarsG · · Score: 1

      Does that still make me evil?

      The trouble is that the surfer can't be sure whether persistent cookies are used for benign aggregate statistics or for more privacy intrusive purposes.

      So the prudent thing is to delete all cookies except for the few we know are benign.

      --
      If J.K.R wrote Windows: Puteulanus fenestra mortalis!
    53. Re:The other side of things. by Just+Some+Guy · · Score: 1
      Mainly, I just wanted to say that there are methods other than cookies that work just as well.

      I disagree. They do work, but definitely not "just as well", unless you enjoy having to add "&sessid=1234" or "<input type="hidden" name="sessid" value="1234" />" to every single link, form, and redirect on your entire site (knowing full well that if you miss one then the session is lost).

      Fortunately, I have the privilege of maintaining a member's-only site where we can tell customers that they have to enable cookies in order to use it. I feel bad for others who have to cater to the paranoid by shifting the session id from a small text file that gets forgotten at the end of the visit to an entity in the URL that gets forgotten at the end of the visit (given that we're only talking about session cookies here).

      Given that the two are exactly functionally identical, I have little sympathy for those whining visitors. I'd wager that most of them heard "cookies are t3h 3v1l!!1!" and believe it without really understand what it meant.

      --
      Dewey, what part of this looks like authorities should be involved?
    54. Re:The other side of things. by Anonymous Coward · · Score: 0

      I wanted to make it easier for them to do what they came to our site to do. Or it would help us target our advertising for effectively.

      Well thank you very much. If your site is attractive to me, then I'd gladly take the extra burden. No need to make it easy for me.

      As for the ads, they're blocked anyway.

      Why don't you marketing wankers just die painfully? If I can screw your lameass statistics by deleting cookies, that's wonderful.

      I find it ironic that the marketers complain about lacking persistence of cookies while at the same time telling you they're not for tracking.

      Fuck off you scum.

    55. Re:The other side of things. by periol · · Score: 1

      He *was* talking about CGI. I mean...

    56. Re:The other side of things. by The+employee+can+cho · · Score: 2, Insightful

      Few will argue that cookies serve a legitimate need for intra-site surfing. The shopping cart example above is a good one.

      The real issue is the handful of companies with ads that are pervasive. I get a nice little prompt each time someone tries to set a cookie on my machine. (I do this out of curiousity, more than a privacy concern.) Doubleclick ads show up all over the place. Even worse, I see cookies being set from *.207.net from everywhere.

      Try to go to www.207.net - it is a blank page. They want to track you, but they don't want you to easily see who they are. Those cookies are set by an online marketing giant Omniture.

      I can block all future cookies for this 207.net domain, but they never use the same one twice. So you cannot have a blanket deny for all 207.net cookies. One site will have 398jdije.207.net - the next may be 39du39.207.net.

      It is this type of deliberate obfuscation that earns my distrust.

    57. Re:The other side of things. by LarsG · · Score: 1

      Does that still make me evil?

      The trouble is that it is impossible for the surfer to know whether persistent cookies are used for gathering benign aggregate data or for more privacy intruding purposes.

      So the prudent thing is to delete all cookies.

      --
      If J.K.R wrote Windows: Puteulanus fenestra mortalis!
    58. Re:The other side of things. by neiras · · Score: 2, Interesting

      I think you make some really interesting points. From one aspect, you are tracking users by depositing information on their computer. While you claim this information could not be used to identify them elsewhere, it's certainly a concern with less careful web developers at the cookie helm.

      Cookies cannot be accessed by sites that did not put them there in the first place. The carefulness of web developers has nothing to do with anything.

      Advertising companies that embed ads in the web pages you surf can read values from a cookie that they set, and they can do this on any page that embeds their ads. It's the same thing as hitting the advertising company's web site whenever you see an ad - of course they can set and read that cookie, and all they're storing is an id number and some frequency cap values (if you block cookies, it might be assumed you haven't seen a popup - so you see more popups!)

      As a web developer, I know that cookies are a good solution to the problem of maintaining state in a stateless medium. It's too bad that they've garnered so much attention as a tool of unscrupulous advertisers - it's hard to write a decent web application without them. The paranoia surrounding cookies is largely unfounded.

      There *are* other methods of tracking session IDs, though, and the smart advertising companies are using them.

    59. Re:The other side of things. by killercoder · · Score: 1

      Oh boo hoo NAT is in the way.

      So presumably this is targeted at e-commerce users - presumably home users right?

      What are the frickin chances an IP is shared by the same user during the same five minute window for a home user? So fuck the karma and take the smack back you ignorant prick. This has been covered hundreds of times - and I don't really want to pound the drum for the next 6 months - but rest assured it DOES work for the kind of aggregates e-commerce sites target.

    60. Re:The other side of things. by zx75 · · Score: 1

      1) True, but if your ip changes during a session, then it does so. As long as a session remains active it isn't an issue.
      2) Also true, which is why sessions are involved in the first place. IPs are the be all and end all of user identification which is why they are not used as such (although for the most part they tend to be a reasonable approximation for the purposes of collecting loose usage statistics).
      3) Also true.

      Now I will respond. Yes navigation can be non linear, however when a page loads you can extract the referrer as well as the current page. Along with timestamps it is a simple matter to construct a web-like approximation of usage. In addition, the exact pattern of movement is usually less important that knowing visits vs. submittals and whatever relevent statistics you want to gather about traffic on your site, but either way it can be done without much trouble.

      What we used specifically were Java Session Beans. They are initialized upon first access to the site and remain valid for the entire time that session remains active until it either a) times out, or b) the user logs off. I won't go into details about establishing session keys and validation details, but needless to say it was stored on the server side session level and application level beans (which were validated against each other).

      At no point did we encode the id in the URL or rely on IPs to tell us the identity, however the only security issue that arose was is a user closed their browser window before logging out (which in CERTAIN browsers failed to send a close message to the server). If a user then attempted to return and log in again, because their session has now changed they would receive a 'user already logged in error'. To help combat this relatively common problem, if the user's IP matched the currently logged in user's IP AND the logged in user has been inactive for a period of time, but not long enough yet to automatically log out we could then invalidate that session, discard it from the cache, and then allow the new user to log in and establishing a new session in the process.

      Through this we were able to build a secure web application, and not once did I ever write a cookie. I'll admit that I don't know the precise details of how Sun implemented Java Server Beans, however I also verified that I could successfully use our application with cookies and JavaScript turned off.

      --
      This is not a sig.
    61. Re:The other side of things. by ferat · · Score: 1

      by and large I blanket accept any cookie set by the site i'm visiting unless it is obviously for an ad server, in which case I block it.

      I block any cookie set by a third party, and any cookie that is assigned to a numeric address (I figure if they're too lazy to create a DNS entry for the server I can't be bothered to accept their cookie).

      It's rare I actually delete cookies that are set since I authorize each and every one manually. As long as your cookies are internal and specific to your site I don't really care. The day you start setting them to track other things is when you'll stop getting permission, and depending on how irritated I am, my business.

      So stick to site-only cookies and keep em benign and we can still be friends.

    62. Re:The other side of things. by heck · · Score: 1
      Most of the things you cite you didn't need persistent cookies for; they could be handled at the session level

      For example, two of your examples were:
      knowing that the last page 20% of people visited was our contact page, yet only 10% of those people actually submitted the form would make me reevaluate that page
      a lot of people clicking through from a banner ad we had on Site A tended to buy Widget B
      both of which are able to be tracked at the session level.

      your non session level variables were "how often do we get repeat business" (or how often does anonymous person X browse our site and not buy anything. What pages are they browsing. What are they searching for. Hmm. Maybe they wanted it in magenta. How many other people are looking for the item in magenta. Ah ha - we need to offer magenta!) Now *that* could be a reason to justify a cookie, but then we start down the slippery slope of tracking what people are doing and the potential evil.

      I would say that for you anonymous users are just that - anonymous. Track what a user does in a session, but do not store any information about that user. Do not let there be a way that the user can be associated with their usage during the session. The downside to that approach is you do not know how often you get an anonymous repeat browser who is looking for something and not finding it (either you have the wrong product, or the product is out of stock, or...) Or another approach is to try to cookie so that you can track repeat visits, but to ackowledge that some do not allow cookies and that your data is skewed. But - and I can't emphasize this enough - but do not associate users to usage.

      My current site is different in that it is a business to business site, and so we have a business relationship with our users. I want to track what the user did and track when they did it (timestamps can matter contractually) Users must login, authenticate, and in doing so accept the fact that their usage will be tracked.

      And note that I don't need cookies. In fact, I can't think of a reason I've needed cookies for the past 4 or 5 years.

    63. Re:The other side of things. by phasm42 · · Score: 1

      Plenty, considering that many homes have multiple computers behind a firewall. Plus, many people do this shit from work, where NAT is pretty much guaranteed. But I guess you wouldn't know about that.

      --
      "No one likes working in a hamster wheel, and your shop smells of cedar shavings from here." - TaleSpinner
    64. Re:The other side of things. by wuffalicious · · Score: 1

      Imagine if this were converted to a real-world scenario. How comfortable would you feel if a brick-and-mortar retailer decided to install cameras throughout their store to track how you browsed their merchendise. They could keep video logs of you from every time you came into the store, so the next time you came in they might be able to offer tips on new items you might be interested in looking at.

      However, eventually someone would decide that offering browsing tips might not be enough. Maybe they'll log your name and address, and have salespeople rush up (especially if you're in an affluent economic group, or target demographic) to usher you in whatever direction might most likely result in a sale. They could know your name before even seeing your face.

      I'm personally not comfortable with that prospect unless I trust the company I'm dealing with. It's important for users to be able to chose whether their information is provided to a business. There's no way to know whether it will be used benignly or malevolently without first getting a feel for the company you're dealing with.

    65. Re:The other side of things. by phasm42 · · Score: 1

      Either you were using session cookies, or your session id was encoded in the URL or the forms for you. If you look in IE's options, you'll notice that session cookies are a separate checkbox from all other cookies. If you are running a stateful application, then you have to have some kind of unique identifier to maintain a persistent state.

      --
      "No one likes working in a hamster wheel, and your shop smells of cedar shavings from here." - TaleSpinner
    66. Re:The other side of things. by Nigel_Powers · · Score: 1

      Don't argue with that prick...he's a

      Ki773r c0d3r

      Plus cookies, the way the original poster was suggesting that they be used is part of the web standard!!!!

      He's not lazy for utilizing an existing standard. The fact that the environment has changed may make the standard obsolete (effectively), but he's not lazy...just in need of a reality check.

    67. Re:The other side of things. by nine-times · · Score: 1
      I think most [reasonable] people wouldn't have much of a problem with what you were doing, but unfortunately a few bad apples can spoil the batch.

      There are loads of good uses for cookies. Like pop-up windows, they were originally meant to be helpful to users and later used for other purposes. Often, technology is morally neutral, available for both bad and good uses.

      However, as a user, it's just too much effort to sort through which sites are using cookies in an intrusive manner and which sites are using cookies to help me. Like pop-up windows and flash ads, I have to throw the baby out with the bath water. Block them all, let god sort'um out.

    68. Re:The other side of things. by emlprime · · Score: 1

      I imagine a lot of objection to cookies, particularly those storing information, is not so much privacy from the web administrators, but privacy from others using the terminal.

      Cookies can indicate that you've been visiting porn, personals, job search, etc websites that indicate to your boss or SO that you've been up to things you oughtnt. Given the enormous mass of sites that put cookies on your browser, it's faster to eliminate all cookies once a month than to sort through them and eliminate only those suspect ones.

      Given that people obviously don't want to admit this is their motivation, they must complain loudly about privacy issues and Big Brother looking over their uniquely identified shoulder.

      I think it would be interesting to develop three classes of cookies.

      • unique identifier: stores only an integer
      • login: stores username and encrypted password
      • user data: stores anything
    69. Re:The other side of things. by phasm42 · · Score: 2, Informative

      If you really want to see what IE is up to, check out ieHTTPHeaders. It's great for dev work, when you need to see exactly what your browser and the server are saying to each other. For Mozilla based browsers, use LiveHTTPHeaders.

      --
      "No one likes working in a hamster wheel, and your shop smells of cedar shavings from here." - TaleSpinner
    70. Re:The other side of things. by zx75 · · Score: 1

      Ok, then the plain relevent facts are:
      1) Session based state was maintained.
      2) Cookies were never explicitly used in code.
      3) Session ID was *definitely* not encoded in the URL.
      4) Never had a single issue with pages not being accessible due to cookies being turned off in the browser.

      Again, I am not aware of Sun's implementation details, so it is entirely possible that they use cookies of some form or another to maintain session state and hide the implementation details from the developer. If so, they did a damn good job because I haven't yet had any issues with it.

      --
      This is not a sig.
    71. Re:The other side of things. by salesgeek · · Score: 1

      Then why isn't user 123.456.789.012 good enough?

      Because it's an invalid IP address among other things.

      --
      -- $G
    72. Re:The other side of things. by xENoLocO · · Score: 1

      Tell that to slashdot!

      Your Headline Reader Has Been Banned Your Headline Reader Has Been Banned Your Headline Reader Has Been Banned Your Headline Reader Has Been Banned Your Headline Reader Has Been Banned Your Headline Reader Has Been Banned Your Headline Reader Has Been Banned Your Headline Reader Has Been Banned

      --
      "The need to build the internet comes from something inside us, something programmed... something we can't resist."
    73. Re:The other side of things. by phasm42 · · Score: 1

      It was likely just session cookies then. I develop JSP pages and Java backend, and I never have to mess with cookies in code to maintain state. But the cookies are there (JSESSIONID I believe), and I dealt with them when I wrote a custom session manager for the webserver. If you still have access to the application, check out the tools in my other reply, and you'll be able to see what exactly is being sent to and from the server.

      I'm not sure what exactly defines a cookie as a "session cookie", but I do know that browsers are more tolerant of them, and many browsers just flush them when the browser is closed. This is not the sort of cookie that you're likely to have when you revisit a site the next week, and for many sites, this is just fine.

      --
      "No one likes working in a hamster wheel, and your shop smells of cedar shavings from here." - TaleSpinner
    74. Re:The other side of things. by Quince+alPillan · · Score: 1

      Have you tried *.207.net?

    75. Re:The other side of things. by TheDracle · · Score: 1

      Web servers have the ability to track users requesting specific web-sites via their IP address. If you're only interested in gaging how well your particular site is doing, and keep a number of how many visitors are viewing a specific web-page, this is all doable without cookies. You could very well determine if a specific form was used on a specific web-page by tracking requests from a particular IP address.

      There are also other alternatives to storing session information via GET or POST variables. For example, look up the continuations based web-application framework SeaSide. All of the session information is saved in a specialized format being passed back and forth via GET or POST, and never to the client's disk.

      There are few other 'real' uses for cookies that I can see, and these are mostly undesirable to most web users. With cookies, vendors can associate visitation of one webserver, with another. They can also produce a history of that user, and track their buying and browsing habits. And, while producing a great deal of insecurity, and the potential for websites to spy on users, make the job of a web-programmer easier. The two prior, are simply only desirable to marketing companies, and the latter is only desirable to lazy programmers. None of these abilities are really desirable to customers.

      I think people will be skeptical about the supposedly "benign" nature of cookies when this marketing article is using many of the same selling points for them as a great deal of Spyware does. Most spyware claims to be your buddy: simply examining your purchasing behaviors to provide you, the customer, with a more enjoyable internet experience. Many come under the guise of helpful toolbar attachments to Internet Explorer.

      In the end, 'most' useful web-functionality, and statistics information can be obtained via other non-invasive and more secure means. And that which can not, probably isn't worth opening the can of worms.

      -Jason Thomas.

    76. Re:The other side of things. by Calyth · · Score: 1

      I'm sure you've heard of proxy and NAT...
      In fact that's one of the easiest ways to try and cover you tracks. If you're going to try to track someone behind a proxy/nat, you'll have to convince the guy running the proxy/nat to work with you.

    77. Re:The other side of things. by RosenSama · · Score: 1

      Yeah, but that's different from a 3rd party doubleclick cookie. In that case they're not aggregating data on many users within one site. They're aggregating data on one user across many sites. It's like following me around all day as I run errands and keeping notes with the intent of trying to sell me something supplementary or complementary to what you saw me buy. That would be annoying. If someone's trying to get inside my head to figure out what I'm doing, I want the ability to stop them. DoubleClick is a recognizable name and I could just remove their cookie or choose to trust them as a reputable company. But if you enable 3rd party cookies there's so many unknown names that it's impossible to know who's who or who's trustworhty. That's why I delete cookies.

    78. Re:The other side of things. by SCVirus · · Score: 0

      Your absolutly right, its like when people call the 'alexa' program installed into sp2 'spyware'. All it does is create statistics on websites and such, its very helpful for advertisers knowing stuff about catagories, and suspected click ratios etc.

    79. Re:The other side of things. by denissmith · · Score: 1

      I think most of us would agree that you have exactly expressed the legitimate and valuable use of cookies. But like all things, there are less legit uses. It is really that lack of confidence that leads me to clean out the cookies, though I do so selectively. The original story headline is about Marketers, not webmasters. I have trust in webmasters. I have no trust in Marketers. I think we would be foolish TO trust marketers, advertisers, etc. They usually work exactly against my interests, and they see information about me as one more product to sell. If I had confidence that cookies were being used within a regime that could not be tied to me as a person I would never delete them. As usual, it is the lack of transparency and lack of trust that fuels behavior. I guess that stems from the portion of the population that sees all relationships as monetarized.

      --
      I have nothing to hide. So, why are you spying on me?
    80. Re:The other side of things. by neil.pearce · · Score: 3, Insightful

      Cookies cannot be accessed by sites that did not put them there in the first place
      You'd hope that would be true, but historically that has not been the case. A google for "cookie exploits", "cookie migration" and even a browse of IE "domain" bugs shows this to be true.

      The carefulness of web developers has nothing to do with anything.
      Really? Some years ago I noticed that the FriendsReunited.co.uk website set a cookie after I'd logged in, along the lines of "confirmeduser=23959".
      What happened if I modified the cookie? Yep, you guessed it... ability to modify somebody elses details.

      As a web developer, I know that cookies are a good solution to the problem of maintaining state in a stateless medium
      If the medium is stateless there is no solution. You mean "as a lazy developer, cookies work most of the time"?

      As a web developer
      I'm guessing you claim cookies to be "good" because your development environment/web-server is not configured to allow anything else? Why not just append a "&sessionid=[big binary data]" to all your page links? I'm guessing that, despite being a "web developer" you are not given the ability to do so

    81. Re:The other side of things. by Anonymous Coward · · Score: 0

      No, but "elsewise" does.

    82. Re:The other side of things. by Anonymous Coward · · Score: 0

      This is my computer not yours.
      I have given no permision to place anything on my harddrive.
      Do what you want to your's leave mine alone.
      Lets do this the other way around from now on whenever I visit a web site, I will leave something
      on your server.
      How would you like that, you would not .

    83. Re:The other side of things. by Bitsy+Boffin · · Score: 3, Informative
      "&sessionid=[big binary data]" to all your page links? I'm guessing that, despite being a "web developer" you are not given the ability to do so


      Because that will inevitably lead to session hijacking. Either through a proxy or people sharing bookmarks.

      Cookies for session ID storage reduce the first problem (but don't remove it totally), and eliminate the second.

      They also reduce code, and remove session id's from URLs which is not where they belong for most URLs (why should the "aboutus" page need a session id, how is that useful, but if passing session id's on the url then it's required even though "aboutus" couldn't care less).
      --
      NZ Electronics Enthusiasts: Check out my Trade Me Listings
    84. Re:The other side of things. by rohan972 · · Score: 2, Insightful

      I suppose it could even be argued that since users can't access the logs, but can access, delete etc the cookies, that the cookies are better.

    85. Re:The other side of things. by Anonymous Coward · · Score: 0

      Im sure you had the best of intentions when you worked for this company, but did you run the company? Did you make the decisions about what was justifiable marketing? Did you draw the line personally at just how far to go with the information gathering power of cookies? The way I see it all of the overly technical information you gathered, if used as you say it was did nothing for your company that you could'nt have gotten from studying your sales. You are also forgetting one very important thing. This is my computer not yours. Does it annoy you when you go shopping only to come back and find that someone has placed and unsolicited flyer under the wiper of your car? Same thing man! I want nothing on my pc unless I put it there. So I don't really care what your reasons are, I will continue to delete my cookies:)

    86. Re:The other side of things. by Anonymous Coward · · Score: 1, Insightful

      Another example of users having to adjust to what is more convenient to the designer/programmer.

      As mentioned before, there is a way to do it without cookies for what ever reason cookies are not available.

    87. Re:The other side of things. by Lehk228 · · Score: 1

      it's more like handing each customer an index card with a code on it, and occasionally employees would ask customers if they had one and what it said if they did have one.

      --
      Snowden and Manning are heroes.
    88. Re:The other side of things. by Anonymous Coward · · Score: 0

      Does that still make me evil?

      No.

      Say that there's a security flaw in the operating system I'm using, that gives remote users root access. If you use this exploit to correct my clock to work with daylight savings time, that doesn't make you evil. However, an evil person could use the same exploit to do other things, so I'm going to fix the bug if I have the means to do so.

      Sorry, but a positive use for cookies doesn't necessarily outweight the negative ones. Keep track of the data server-side.

    89. Re:The other side of things. by 1u3hr · · Score: 1
      Does that still make me evil?

      Doubleclick et al fucked it up for people like you. Who wants to let some creepy marketer track you from site to site and correlate it with personal information?

      Unless you go to the hassle of carefully monitoring your cookies, which you probably need a third-party app to do, it's simpler just to deny or frequently delete them all. Personally I block most and allow a handful, mostly logging me into forums like this one.

    90. Re:The other side of things. by Weezul · · Score: 1

      But, even then their site history was really only incidentally linked to their contact info because we never correlated the data together. Why would I? First your software can pick up on people who are interested in something your selling from your site. Next your high pressure sales people call up to get the guy to buy it, after all "you have a prior business relationship." Your asking their computer to report on them for you, they don't have to let their computer do it, simple as that. Yes, I also trade supermarket loyalty cards with all my friends on a regular basis, to help get those discounts, and also just to make the data less meaningful.

      --
      The Christian religion has been and still is the principal enemy of moral progress in the world. -- Bertrand Russell
    91. Re:The other side of things. by jonadab · · Score: 1

      There's nothing wrong with the kind of analysis you're talking about doing. Of course, most of it doesn't require the cookie to persist beyond one browser session. That won't give you percentage of return visitors, but I'm not sure that particular stat really helps you serve the customer better in the way you describe, either.

      Anyway, sites that use cookies in the way you describe aren't the reason why people delete cookies or limit their lifetime.

      Let me tell you my side of the story: I'm The Computer Guy at a public library. Each browser in the library may be used by fifteen or twenty different people in a given day, fifty or sixty people in a given week, and hundreds of people in a given year. People -- a *lot* of people -- use computers like this to access your site. Now, at our library, I've been careful to set Firefox to limit the max lifetime of all cookies to the current session, but I'm pretty sure that the overwhelming majority of libraries, internet cafes, and similar sites don't do that. Think about the implications of *that* for your precious stats. If I were you, I wouldn't trust any of the stats that require a cookie to persist beyond the current browser session.

      --
      Cut that out, or I will ship you to Norilsk in a box.
    92. Re:The other side of things. by jonadab · · Score: 1

      >>> Knowing that "John Smith" visited our site 3 times a week
      >>> isn't really any more insightful that knowing that "User
      >>> #5233258" visited us 3 times a week.

      >> Then why isn't user 123.456.789.012 good enough?

      > user 17.123.23.5 might be 30,000 computers, that's why

      Much more likely, User #5233258 is a computer used by more than one person. Despite the term "Personal Computer", the overwhelming majority of them are used by multiple people (usually at least three) and no, they don't generally bother with multiple profiles or accounts at either the OS or browser level.

      At the library where I work, each of our computers is used by numerous people in any given day and potentially hundreds of people in a year. How is it, then, that a cookie is any better or fundamentally different from an IP address in terms of identifying a specific user? All it does is identify a specific web browser on a specific computer, which is *not* the same.

      If you really want to confirm it's the same user, you're going to have to make them register and log in every time. But users don't like that. Perhaps it's best to just forget about tracking the percentage of repeat visitors.

      Brick and mortor stores don't operate under the illusion that they can track the number of repeat visitors; they know that's impossible, or at least very impractical. It's just as impractical for a website, but for some reason a lot of webmasters think they can do anything, and that physical realities don't apply to them.

      --
      Cut that out, or I will ship you to Norilsk in a box.
    93. Re:The other side of things. by Jonsey · · Score: 1

      I find it doubtful, in fact, address 17.123.23.5 doesn't respond to reverse lookup, at least through my corporate DNS, and it's in Apple Computer's Class A address space. ; )

      --
      I assert that my comment is only my opinion, not that of any employer, past, present or future.
    94. Re:The other side of things. by Anonymous Coward · · Score: 0

      "Why not just append a "&sessionid=[big binary data]" to all your page links?"

      You obviously don't work developing/maintaining websites of any significant size, or you would know the several answers to that question.

      The biggest reason is posting of links. If you have any significant level of traffic or stickiness, users will be posting various links to your site on forums, in IM, etc. If you have state in your urls, you will have big problems, and lots of complaints. State in urls is a security problem far worse than the stupid cookie you sited.

    95. Re:The other side of things. by bentcd · · Score: 1

      There is no doubt that cookies can be used for things that are Good. The problem, however, is that it is difficult to tell the Good cookies from the Bad cookies, and allowing one Bad cookie too many is more damaging than losing out on a Good one. So they get turned off.

      --
      sigs are hazardous to your health
    96. Re:The other side of things. by neiras · · Score: 1

      "A google for "cookie exploits", "cookie migration" and even a browse of IE "domain" bugs shows this to be true."

      I was speaking of the way cookies are meant to function, as per RFC 2109, 'HTTP State Management Mechanism'. Buggy clients 'historically' get fixed (slowly, if they were written by Microsoft). The only cross-client behaviours developers can count on are those set forth in the RFC.

      "Really? Some years ago I noticed that the FriendsReunited.co.uk website set a cookie after I'd logged in, along the lines of "confirmeduser=23959". What happened if I modified the cookie? Yep, you guessed it... ability to modify somebody elses details."

      I submit that any web developer stupid enough to handle authentication in that way needs to do a lot more than be a little more careful. Whoever wrote that site did not understand their own medium. Rule number one - treat any data from the client as tainted. Session cookies should never contain references to 'real' account numbers, and should usually be hashed with something unique to a particular client, like an IP address. It's pretty straightforward to defeat session hijacking for all practical purposes, if you know what you're doing.

      "If the medium is stateless there is no solution. You mean 'as a lazy developer, cookies work most of the time'?"

      Oh, come on, no need to be uncivil - of course there are solutions to maintaining state during a session. Cookies can store session IDs, URLs can have them attached... If you don't like either of those methods, there's always clock skew analysis or dynamic vhosts.

      "I'm guessing you claim cookies to be 'good' because your development environment/web-server is not configured to allow anything else? Why not just append a '&sessionid=[big binary data]' to all your page links? I'm guessing that, despite being a 'web developer' you are not given the ability to do so"

      You guessed wrong, and your inadequacies are showing :) Flaming egos damage credibility - but thanks for the laugh, anyway.

    97. Re:The other side of things. by metamatic · · Score: 1

      Well, I'm also a web developer.

      The only time I've used cookies has been to support authentication, and to allow preferences to be stored so that the web site can appear the way the user wants.

      As a user, my policy is that I allow cookies only if they provide me with some compelling benefit. If I browse a shopping site and decide to buy something, and put it in the cart, then at that point I'll enable cookies. If I turn up at a random web page and immediately the site tries to shove half a dozen cookies at me without telling me why, I'm going to block them all.

      So my question is: does your web site explain to users why you're using cookies, and outline how they will benefit? Do you have a clear and simple privacy policy? If not, then why the hell do you think anyone is going to accept your cookies?

      --
      GCHQ Quantum Insert installed. If only our tongues were made of glass, how much more careful we would be when we speak
    98. Re:The other side of things. by cthulhubob · · Score: 1

      That's a great idea; I would totally shop at a place that had that policy.

      If it looked likely that I would make a return visit, I would probably even create a user account.

      Just to clarify, I never create user accounts on sites that REQUIRE an account to complete the transaction. I have to give you my credit card account number right after I give you a username, password, email address, phone number and my mother's maiden name in case I forget my password? Umm, no thanks. Sounds like you have everything you need for identity theft set up already. "Yes, this is cthulhubob calling to check my account balance. Verification? Well, my mother's maiden name is xxxxxxx. Thank you, now I would like to transfer some funds..."

      --

      In post-9/11 America, the CIA interrogates YOU!
    99. Re:The other side of things. by Enigma_Man · · Score: 1

      Unless you're stuck with an older version of CF that has _broken_ reg-exp functionality, asinine use of input to builtin functions (sometimes requires variable names to be in quotes, sometimes not, sometimes requires the # symbols, sometimes not, even between different inputs in the same function!), inability to create custom functions, the custom tags require you to jump through hoops and use things like global variables to pass data to, and the damn fact that every tag starts with "CF" so the glossary for the letter "C" is goddamn gigantic. I'm aware that many of these things have been fixed in newer versions, but holy crap what a shoddy language to evolve from.

      -Jesse

      --
      Nothing says "unprofessional job" like wrinkles in your duct tape.
    100. Re:The other side of things. by arkanes · · Score: 1
      I actually am stuck with such a version right now. And yeah, I feel your pain. On the other hand, I'd still rather use it (inconsistency and warts and all) than PHP for pretty much everything that doesn't involve lots of passing off to other processes (everything I do, pretty much).

      You don't *have* to use global vars for custom tags, by the way, although the loathsome crap which is fusebox has people doing that.

    101. Re:The other side of things. by Anonymous Coward · · Score: 0

      No offense, you're a fucking genius.
      Session cookies passed through the URL have been around since everyone discovered HTML was stateless.
      I know J2EE can supply them whithout programmer intervention, so .NET can probably too.

      Rick DeBay

    102. Re:The other side of things. by f0rt0r · · Score: 1

      I have a bit of insight into this as I support a Log analysis system. Marketers not only want to know what pages are hitting, but they are also concerned with the path a user takes through the site, and even where they leave.
      In one case, a Motorcyle parts site was not getting many sales, so they hired a consulting firm to use the same program I support to track the flow ( sequence of pages ). They discovered that most users were leaving after they hit the product search page. With this information, they analyzed their product search engine and discovered how bady it worked ( it hardly ever returned results that were related to the search keywords ), and their web site sales more than doubled because people coudl finally find what they were looking for.

      Log files are good for this, but cookies ( and even better, page tags ) can often give you an idea of why you promotion or whatever isn't working. Does it take people too long to get to the page they want to find, to find the product they are looking for. Does your page tag tell you that people are clicking a link to google.com right before they leave your site ( meaning they can't find what they want on your site ).

      Also, page caching can hide a lot of the more basic metrics such as page hits. Page tagging gets around this by embedding code in the page that reports it has been loaded to a Data Collector, regardless if it was loaded from the Web site or web cache.

      Yes, I am all for privacy, and have my browser set to ask me about every single cookiek,and to remember my decision by setting cookie policies on a per site basis, but there are other less intrusive ways of getting the data.

      Regardless of how the data is collected, the user needs to be made aware and given the opportunity to accept of deny whatever information is gathered client-side. And I don't mean a 50 page Eula, I mean a short "this site records information X using method Y and retains if for Z days ), if you don't like it, press the back button. :)

      --
      I can't afford a sig!
  2. Maybe now... by Miros · · Score: 2, Interesting

    Maybe now marketing companies will try to discover new ways of generating usage statistics beyond catching, tagging, releasing, and tracking innocent internet users via cookies. This could be an excellent opportunity for innovation in the space resulting in better privacy and better statistics.

  3. Sadly by guildsolutions · · Score: 2, Insightful

    If someone has money, you have no privacy.

    Its a mircale that marketing firms are not claiming to 'own' the cookies and sue you if you delete them for destruction of property.

    1. Re:Sadly by Anonymous Coward · · Score: 1, Insightful

      I own my computer. Your right to store 'your' cookie ends with my right to do with my hardware as I see fit.

      Marketers are asshats who believe the world owes them a stage.

    2. Re:Sadly by tktk · · Score: 1

      Yeah...and then we sue them back for tresspassing on private property.

    3. Re:Sadly by Nos. · · Score: 1

      If someone has money, you have no privacy. Like most things, depends where you are. We have pretty strong privacy legislation in Canada.

      Its a mircale that marketing firms are not claiming to 'own' the cookies and sue you if you delete them for destruction of property.
      Again, probably depends where you live, but I doubt it could happen in most countries. This example is about a physical piece of property, but I'm fairly certain that same laws would apply to cookies (IANAL). I came home one day to find a sample bottle of some hair or skin product in my mailbox along with contact information for a local sales agent. I checked, my wife was interested, so I threw out the contact information and through the bottle in the bathroom and forgot about it. A week or so later, along comes this sales agent asking if we tried it. I said no. She said we either had to pay her $20 for the product or return it to her. Under Canadian law, I am under no obligation to either return or pay for the product since it was placed in my posession (my mailbox) without any agreements to any such terms.

    4. Re:Sadly by Miros · · Score: 1

      Somehow i dont think recieving a cookie could qualify as trespass. If it did, why not sue for people sending you mail you dont want?

    5. Re:Sadly by varmittang · · Score: 1

      I think you might. OSnews.com has an archive fee for bulk email senders. I never looked up that US Code but I'm guessing its there.

      --
      -----BEGIN PGP SIGNATURE-----
      12345
      -----END PGP SIGNATURE-----
    6. Re:Sadly by BlewScreen · · Score: 1
      Under US law, placing anything in someone's mailbox, if you are not a US Postal Service employee, is not allowed

      Any mailable matter not bearing postage and found as described above is subject to the same postage as would be paid if it were carried by mail.

      She'd have owed postage on the sample product.

      -bs

      --
      That that is is not that that is not. That that is not is not that that is.
    7. Re:Sadly by SiO2 · · Score: 1

      Don't give them any ideas. Besides if marketers claiming ownership of cookies fails to work out, we'll all have to start accepting license agreements for web sites before getting to content. At that point, we're screwed. I know I don't read EULAs.

      Oops.

      SiO2

  4. Misleading article by Anonymous Coward · · Score: 0

    Cookies are delicious delicacies.

    1. Re:Misleading article by Anonymous Coward · · Score: 0

      Cookies are delicious delicacies.

      As opposed to redundant redundancies?

  5. Flash cookies by vandon · · Score: 1

    Didn't macromedia already put out an article on how to disable 'flash cookies'?
    Just wait until they pay MS a bunch of money and IE comes with a cookie-type system you can't disable.

    1. Re:Flash cookies by TheSloth2001ca · · Score: 2, Insightful

      Go Go Gadget Firefox!!!

      --
      Just another crappy blog
    2. Re:Flash cookies by backbyter · · Score: 1

      URL:http://www.macromedia.com/support/documentatio n/en/flashplayer/help/settings_manager.html

    3. Re:Flash cookies by colinrichardday · · Score: 1

      Hello, firefox downloads!

  6. Incorrect association? by Anonymous Coward · · Score: 1, Insightful

    Since the marketeers want to use their cookies to spy on me, I'm not sure what's incorrect about those associations...

    1. Re:Incorrect Association? by 3CRanch · · Score: 0

      maybe the difference could be that they are tracking/monitoring/whatever your usage on their site vs. spyware that tracks your overall usage.

      I'm not sure if I'd mind them knowing that I prefer page X on their site. Its a lot different then spyware watching all my activities and generalizing my usage for potential advertisers to exploit.

  7. Monthly basis? by superpulpsicle · · Score: 1

    Try getting rid of cookies on a daily basis. I know of at least 2 people who used the "saved password" feature in IE6, and had their password stolen. I tell them to first use Firefox. Then I tell them to never save anything. Leave the smallest cookie/cache possible. Delete at will.

    1. Re:Monthly basis? by AutopsyReport · · Score: 1

      How is Firefox better than IE in terms of the "saved password" feature? Firefox still prompts you to save your passwords for any site you enter one in. Whether using IE or Firefox, this is an independent security issue of the browser being used.

      --

      For he today that sheds his blood with me shall be my brother.

    2. Re:Monthly basis? by utuk99 · · Score: 1

      Every time you close your browser is even better. That is one of the first options in Fire Fox that I set after I install it.

    3. Re:Monthly basis? by phasm42 · · Score: 4, Insightful

      And how exactly did this happen. I have not deleted my cookies for a couple YEARS since I last reloaded my computers, and have yet to have a single problem with stolen passwords or any of these other problems that evil cookies are supposedly causing.

      There is the possibility that a large enough group of companies collaborating could use the information to link purchases and browsing habits together. But I really don't care. They want to try to personalize my ads, that's fine too. Why? Because it's a free lunch. They think they're convincing me to buy stuff, when in fact I don't give a fuck. As long as the illusion is maintained, I'm happy to let them think they're learning valuable information about me. If this avenue is cut off to advertisers, either the free lunch will end or something more insidious will take its place.

      Most companies only care about using cookies to keep track of visitors to their site anyway, and this can be useful to improve the site. A site that uses tracking information to see what other sites you visit (which is difficult without having their ads directly on other sites, which usually isn't the case because someone else usually hosts the images) and sells your email address is probably not one you want to continue purchasing from.

      --
      "No one likes working in a hamster wheel, and your shop smells of cedar shavings from here." - TaleSpinner
    4. Re:Monthly basis? by Anonymous Coward · · Score: 0

      The concern is companies like Doubleclick tracking you from site to site, as their ads are everywhere.

    5. Re:Monthly basis? by Tim+C · · Score: 1

      Again, so what? So they know I go to amazon and slashdot and the BBC news site and tekheads and scarygoround etc etc - so what? What exactly are they going to do with that information that is detrimental to me or my interests? Target ads at me?

      I have *never* bought a product due to an ad on a website; hell, I hardly even see them, let alone click on them.

      Let them expend their time, energy and money tracking and targetting me, I don't care; why should I? What can they actually *do*?

    6. Re:Monthly basis? by almostmanda · · Score: 1

      I have not deleted my cookies for a couple YEARS since I last reloaded my computers, and have yet to have a single problem with stolen passwords or any of these other problems that evil cookies are supposedly causing. This sounds like one of those "I haven't used an antivirus in five years, and I've never had ANY problems" things. How would you know? Just because you have yet to see the ill effects of something does not mean that it's not happening. If an identity theif is good at what he does, you'll NEVER know your information was stolen. As for the rest of it, I think you undervalue your personal information--having your identity stolen is not fun. It's great that you don't care about Doubleclick having your information, but what happens when they link it to personally identifiable info, like your phone number, home address, and email address? Then, they sell it to some no-name company, who sells it to Direct Marketing and a few spammers, who in turn sell it to kids looking for credit cards to steal. Now, you're getting spam, junk mail, telemarketing calls, and random charges to your credit card. If you want to help all of these bottom feeders keep their slimy jobs, go ahead, but I'd rather not encourage a system that annoys me and does not respect my privacy.

    7. Re:Monthly basis? by phasm42 · · Score: 1

      Cookies do not leak my personal information. Doubleclick does not have my personal information. The only way they could get it is if some website which had it directly gave it to them, in which it would have nothing to do with cookies. Cookies don't put you in danger of having your identity stolen, bad sites do, and it has nothing to do with cookies.

      All Doubleclick has is some number like "6156A238F7652D78601A", which corresponds to a session in their database, possibly linking to other ads I've looked at on other sites. That is all. Giving them cookies does not suddenly give them access to my personal information. If you have been told otherwise, you have been misinformed.

      --
      "No one likes working in a hamster wheel, and your shop smells of cedar shavings from here." - TaleSpinner
    8. Re:Monthly basis? by drooling-dog · · Score: 1
      Let them expend their time, energy and money tracking and targetting me, I don't care; why should I? What can they actually *do*?

      So why should it bother you that so many other people don't feel the same way, and do in fact object to being tracked in this way? You sound like one of those idiots who say that they have no need for civil rights and liberties because they aren't dissidents and therefore have nothing to fear...

  8. So wait... by DrEldarion · · Score: 4, Insightful

    Hrm? They track you through the cookies, yet comparisons to "spyware" are unjustified?

    1. Re:So wait... by linzeal · · Score: 1

      I forgot the name of the program but there was an extension early on in firefox that randomly changed properties of cookies known to be used for tracking. Anyone remember what I'm talking about?

  9. Personally... by Shadow+Wrought · · Score: 3, Funny

    I blame the Atkins craze for the sudden diminishing of cookies. On a side note, as a general rule, I'm pretty happy with any behavior that makes marketer's lives more difficult. Just one of those rules of thumb.

    --
    If brevity is the soul of wit, then how does one explain Twitter?
    1. Re:Personally... by Short+Circuit · · Score: 1

      I blame weight-loss craze in general for the proliferation of worms...

  10. Cookies are good by Anonymous Coward · · Score: 0

    People can complain all they want, but cookies are necessary to make surfing experiences less problematic. I'd rather be able to come back to a site and have it know my preferred settings, than have to always revert back to some default state.

    Most people crying about privacy issues are just Chicken Littles.

    1. Re:Cookies are good by Rosco+P.+Coltrane · · Score: 2, Interesting

      People can complain all they want, but cookies are necessary to make surfing experiences less problematic.

      Oh yeah? I have my Mozilla configured to ask me, if a site wants to install a cookie, whether I want to let it or not. Usually, I just click DENY more or less automatically. Once in a while though, I do that and a realize the site doesn't work without cookies so I go and explicitely re-enable cookies for it.

      How often does that happen? I'd say about 10 times this year, no more. And I can tell you, I click on the DENY button about 50 times per day, because just about every website owner and his dog wants to set cookies.

      So, "cookies are necessary" my hiney. I don't buy that...

      --
      "A door is what a dog is perpetually on the wrong side of" - Ogden Nash
    2. Re:Cookies are good by michaelggreer · · Score: 1

      To preserve any state (login, for instance) in an essentially stateless mechanism, cookies are the simplest path. Or they could tag the url with your id after you log in, or track your ip, but I really don't see how that's any better. All cookies do is say "there he is again, carrying that value I set earlier."

    3. Re:Cookies are good by merreborn · · Score: 1

      So, "cookies are necessary" my hiney. I don't buy that...

      Cookies are really the only reliable way to identify a client. Did you type your username and password in to post?

      No. Because you have a slashdot cookie identifying you as user 209368.

      Now, if you wanted to enter your user name and password every time you did anything on any website ever, then yes, you could hapily browse the net cookie-less.

      Good luck logging in to you bank website, buying that book on black helecopters, or selling your tinfoil hat collection on Ebay, though.

    4. Re:Cookies are good by Rosco+P.+Coltrane · · Score: 1

      To preserve any state (login, for instance) in an essentially stateless mechanism, cookies are the simplest path.

      I understand that, what I'm saying is: how many sites requiring cookies actually need cookies other than for tracking viewer habits? The only sites I let use cookies are Slashdot for login, and various reputable online merchants for shopping carts. All the others I visit either have static content (no need for cookies there, so why do they use them? tracking) or use the old variables-in-URL method.

      --
      "A door is what a dog is perpetually on the wrong side of" - Ogden Nash
    5. Re:Cookies are good by michaelggreer · · Score: 1

      Ok, I understand. But don't think you're not getting tracked because there are no cookies. Anyone who runs a log analysis of their web server collects click-depth by ip address, which is no different. You go somewhere, they register that you've been there. Cookies or server log, I don't see the difference, and I just can't muster up much outrage either way.

    6. Re:Cookies are good by Rosco+P.+Coltrane · · Score: 1

      Anyone who runs a log analysis of their web server collects click-depth by ip address, which is no different.

      It is different: there are 5 persons NATed behind my IP, and my IP is dynamic. Good luck tracking me with my IP :-)

      I just can't muster up much outrage either way.

      I'm not outraged about cookie-tracking, just annoyed, the same way that I'm annoyed when I find unwanted ads in my mailbox.

      --
      "A door is what a dog is perpetually on the wrong side of" - Ogden Nash
  11. Let me guess.... by snofla · · Score: 1

    the death of the Internet is imminent?

    --
    i don't like style guides
    1. Re:Let me guess.... by The_Wilschon · · Score: 1

      the death of the Internet is imminent?

      Yep.
      Netcraft confirms it.

      --
      SIGSEGV caught, terminating

      wait... not that kind of sig.
  12. Incorrect Association? by goldspider · · Score: 1
    "...a fact one marketers attributes to incorrect associations with spyware and privacy invasion."

    Maybe I don't get it (as I'm not a marketeer) but I'd say that associating tracking cookies with privacy invasion is quite appropriate.

    --
    "Ask not what your country can do for you." --John F. Kennedy
  13. Don't delete cookies by i.r.id10t · · Score: 5, Informative

    I don't delete 'em. I log in to various sites that use them (that I want to use them), then I close the browser and then make the cookies.txt file read-only (chmod or chattr, or attrib). Get the benefit for sites I want the customizations on, don't get the tracking

    --
    Don't blame me, I voted for Kodos
    1. Re:Don't delete cookies by Anonymous Coward · · Score: 1, Insightful

      If the cookie contains a GUID to identify you, what difference does it make if the GUID is read only? Answer: it doesn't make any difference.

    2. Re:Don't delete cookies by CTho9305 · · Score: 1

      If you use Mozilla (well, "SeaMonkey" now), you can do something similar through the UI - the cookie manager lets you do things like "disallow persistent cookies for all sites except ". It's a lot more convenient than changing file permissions and editing text files. Plus, since you can still have per-session cookies, stupid sites that depend on them don't break.

    3. Re:Don't delete cookies by Anonymous Coward · · Score: 0

      There's a trick to do that in firefox without messing with chmod: just tell it to prompt you for each one, then when you have the ones you want go in the prefs and disable cookies completely. Every cookie you have is still readable but unless the site's on your whitelist they can't do anything else.

    4. Re:Don't delete cookies by phasm42 · · Score: 1

      This doesn't make any sense. As long as the browser sends the cookie, then the site can track you (that's how you get the customizations). The only thing affected is that the expiration date doesn't get updated, and if the site only uses things like 6-hour cookies that are purged server-side every day, you probably won't be able to get a new cookie. Your browser will say "I'm session 1234", and the server says, "I don't know who you are, you are now session 5678", but since you can't write cookies, it won't be updated (or it will only be updated while the browser is open). There really isn't much use in constantly updating a cookie, the utility is in creating the cookie, and then seeing that static value returned upon every page hit.

      --
      "No one likes working in a hamster wheel, and your shop smells of cedar shavings from here." - TaleSpinner
    5. Re:Don't delete cookies by Anonymous Coward · · Score: 0

      Better use a cookie scrambler... resulting in garbage (never issued UIDs) being sent to the ad companies which infects their tracking system.

      By the way has anyone tried to buffer-overflow the cooky analyzer tools ?

    6. Re:Don't delete cookies by s20451 · · Score: 1

      Sure, but what he is talking about is an easy way to create a cookie whitelist, when your browser does not support cookie whitelists. This is not some kind of magic cookie shield that gives you all the benefits with total anonymity.

      --
      Toronto-area transit rider? Rate your ride.
    7. Re:Don't delete cookies by Anonymous Coward · · Score: 0

      Can you change them? Or append to them? If the sit e asks for data, why not send more? Send random garbage strings with the info.

    8. Re:Don't delete cookies by cgreuter · · Score: 1

      I don't delete 'em.

      Me neither. I edit them. It's much more satisfying.

      (Okay, not really, but I've heard of people doing it and thought it was a wonderfully eeeeevil thing to do.)

    9. Re:Don't delete cookies by worf_mo · · Score: 1

      I have found CookieCuller to be very useful. It allows you to "protect" certain cookies and get rid of all the rest through a simple interface or - according to the FAQ - delete unprotected cookies automatically at browser startup. Works with Firefox and Mozilla.

  14. Other than login "convenience" by raile · · Score: 1

    What's a user's impetus to keep cookies around for more than a session? And if everyone followed security best-practices, they wouldn't even do that.

    The fine grained site opt-in/session-based control of cookie lifespan has been let out of most browsers' Pandora's Box, and I can't see it going back in.

  15. Spyware by Anonymous Coward · · Score: 0

    Many less technical people make no differentiation between cookies and spyware. When you are told you need to run three anti-spyware programs to get most, but still not all, of the spyware out afflicted users just get very intolerant. People are changing their habits because of spyware, that's how sick they are of it.

  16. Yes, yes it does. by Otto · · Score: 5, Insightful

    only incidently linked to their contact info because we never correlated the data together ...
    Does that still make me evil?


    Yep.

    If you have the *ability* to do it, then somebody in your organization eventually will decide that it sounds like a good idea.

    This is why all my browsing is cookie-free (or rather, cookies being allowed on a whitelist basis and everything else removed on browser shutdown). I don't want you to have that ability to track what I do on your site for very long. Regardless of whether you use that ability or not, I don't trust you to behave properly with that information. Why should I? I don't know you.

    --
    - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
    1. Re:Yes, yes it does. by Miros · · Score: 5, Insightful

      If you dont trust the website, why would you ever give it personal information anyway? In the above poster's example, he said that they collected personal information about users when they would buy something (when else?). I'm sure that you're not suggesting that you buy things from websites that you dont trust.... SO, what are you saying exactly? You sound paranoid.

    2. Re:Yes, yes it does. by tgd · · Score: 2, Insightful

      Thats rediculous.

      Do you insist the security tapes are turned over when you shop at stores? Do you pay only in cash? Its hard to pay cash online, but presumably you use credit cards. Why do you trust them with your info? Its easy to track where you shop with that.

      Do you know the people at your bank? At Visa/MC? The processor? How about the people at the stores you shop at? Do you not use any of those shopper cards at the grocery store (I don't)? No Costco membership, or library card?

      You know, you're logged into /., do you trust the people there with knowledge of what stories interest you? Have you SEEN their editing abilities? I'm not sure I would!

    3. Re:Yes, yes it does. by justforaday · · Score: 5, Funny

      Have you SEEN their editing abilities?

      They have editing abilities?

      --
      I'll turn into a supernova and burn up everything. Well I'll turn into a black little hole and you'll turn into string.
    4. Re:Yes, yes it does. by snorklewacker · · Score: 0, Flamebait

      > No Costco membership, or library card?

      Actually, thanks to the USA PAT RIOT act, most libraries wipe your record as soon as you check a book back in.

      --
      I am no longer wasting my time with slashdot
    5. Re:Yes, yes it does. by Otto · · Score: 1

      Do you insist the security tapes are turned over when you shop at stores?

      If I thought it feasible, yes, I would. It's not feasible, so no, I don't.

      Do you pay only in cash? Its hard to pay cash online, but presumably you use credit cards. Why do you trust them with your info? Its easy to track where you shop with that.

      I trust my credit card company, because hey, it's their money I'm spending. If they decide to be bastards, then I'll just not freakin' pay 'em. ;-)

      Do you know the people at your bank?

      I know that a bank has legal limitations on how it can deal with customer information and I'm comfortable with those limitations.

      How about the people at the stores you shop at? Do you not use any of those shopper cards at the grocery store (I don't)? No Costco membership, or library card?

      I have a grocery card. It says I'm a 57 year old black woman named "Monica". Or at least it did, I've traded with other people several times. Dunno who's identity I'm shopping with now. :)

      You know, you're logged into /., do you trust the people there with knowledge of what stories interest you?

      I read nearly every story on /. at one point or another, so it's not like there's a lot of information to be gleaned from that one. :P

      --
      - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
    6. Re:Yes, yes it does. by nitelord · · Score: 1

      Relax. You've been reading too many magazines..

      Just because a company knows you hit a certain pattern of pages on their sites doesn't mean they know anything about you. Companies collect this information in aggregate, nobody cares about you and the few pages you looked at unless they have data for thousands of other people as well.

      Anyway, the point is theres not many evil things you can do with this sort of information. Many anti virus, firewall, etc. companies use this sort of shit to get people to buy their software to protect themselves against the "enemy" stealing their personal data. Please.

    7. Re:Yes, yes it does. by Cylix · · Score: 1

      I do that too with my grocery card.

      I was Johny Bravo for a while and then I decided to be Brent Spiner. (Lost brent recently, gotta make a new one soon, but hell I usually just borrow someones)

      Maybe tomorrow I'll be Rob Malda.

      The only hilarious way to do identity theft.

      --
      "You should always go to other people's funerals; otherwise, they won't come to yours." -- Yogi Berra
    8. Re:Yes, yes it does. by jim_v2000 · · Score: 1

      If you have the *ability* to do it, then somebody in your organization eventually will decide that it sounds like a good idea.

      And so what if they do? If the said company already has your information, why does it matter if they know how often you come to their site, and where you go on the site, and which sites they get click throughs from?

      Doesn't sound very sinister. You should focus your efforts on getting MasterCard to stop losing people's info, or something serious, rather than worrying about cookies.

      --
      Don't take life so seriously. No one makes it out alive.
    9. Re:Yes, yes it does. by Fred+Ferrigno · · Score: 1

      Why bother? Most places don't actually require you to submit any information at all. I usually take the card and throw away the application.

      Or, if you want to be lazy, anonymous, AND a bastard, throw the card away too. Just ask for a new one every time you go to the market. (Same as flushing your cookies, no?)

    10. Re:Yes, yes it does. by Otto · · Score: 1

      If the said company already has your information, why does it matter if they know how often you come to their site, and where you go on the site, and which sites they get click throughs from?

      Getting my name and credit card number is trivial. So is getting yours. Anybody could have that, it's mostly freely available information if you're not completely clueless. In other words, that's not information I try overly hard to protect.

      --
      - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
    11. Re:Yes, yes it does. by TopSpin · · Score: 2, Insightful

      sure that you're not suggesting that you buy things from websites that you dont trust....

      Contemporary life does not provide us with the option of trusting every entity with whom we interact. Do you trust your electric utility and their outsourced billing department? What about the clerk behind the counter at the gas station who now has your credit card number, license plate and photograph? What about that cable company and their computing hardware embedded in your home?

      The parent recognizes that some power is left to him in the form controlling cookies. He is well aware of the fact that his business on the Internet isn't truly anonymous, but why make it easy? Controlling cookies raises the bar, usually above the level of nefarious bastards that use collected information to their own ends. Calling this "paranoia" is dismissive exaggeration.

      Complaining about the ineffectiveness of cookies is foolish. If you're really providing so much value to your customer that tracking their activity is going to provide real benefits, the customer won't mind maintaining an account with you. Otherwise you're just providing some marketing slug with ammunition.

      --
      Lurking at the bottom of the gravity well, getting old
    12. Re:Yes, yes it does. by periol · · Score: 1

      And so what if they do? If the said company already has your information, why does it matter if they know how often you come to their site, and where you go on the site, and which sites they get click throughs from?

      Apparently, you've never heard of variable pricing.

    13. Re:Yes, yes it does. by periol · · Score: 1

      Or, if you want to be lazy, anonymous, AND a bastard, throw the card away too.

      This is exactly what I do. I decided to treat corporations like corporations, and not people.

    14. Re:Yes, yes it does. by Kazoo+the+Clown · · Score: 2, Interesting

      Marketeers often forget that the user actually has some say in the process as well. Just as services like Paypal allow you to mask your credit data from a vendor, eventually anonymous buying services will provide the ability to mask your identity completely. Imagine a service, say, BuyMaster.com, combined with a new AnonyShip service from UPS or FedEx where you can purchase through them and all the vendor site knows about the purchase is it was placed through BuyMaster and then must turn the product over to FedEx with only an ID number. Only BuyMaster knows who bought it and only FedEx knows where it's being sent. The vendor is completely disconnected from his market data-- the majority of purchases being placed by a single entity from his perspective. Now providing you can trust buymaster and the shipper this sounds like a valuable service-- at the very least the customer limits the propagation of his data. The customer could at his option, enable the ability to reveal certain aspects of his demographic in order to improve services, such as age, gender, interests, etc., but completely at the customer's discretion.

      Marketeers have to get over characterizing customers as consumers. There's a difference. Really, what does it say about a company that views their buyers in that way? Do they provide a customer-friendly service, or are they simply tossing their products into a brightly painted swill bucket and opening the gate to the hog pen? If companies can't remember the adage, the customer is always right, they may lose all contact with their consumers.

    15. Re:Yes, yes it does. by NickFortune · · Score: 1
      I have a grocery card. It says I'm a 57 year old black woman named "Monica". Or at least it did, I've traded with other people several times. Dunno who's identity I'm shopping with now. :)

      I love it! I never thought of that :D

      --
      Don't let THEM immanentize the Eschaton!
    16. Re:Yes, yes it does. by Nightlight3 · · Score: 1

      If you dont trust the website, ...You sound paranoid.

      You don't know who may have access to that server database in the future (e.g. a hacker, police, FBI, IRS, your boss, your spuse, your competitor,...) and how they might use the information on the pages you visited there. For example, you may have bought some textbook from Amazon. But you may have also looked or searched for items you don't wish to become public, so you don't want the second search to be associated with your name via the cookie.

      Even more importantly, you may not want to leave traces on your machine on what site/page you visited and when. The cookie is a form of history and anyone with access to your computer (e.g. someone suing you, or investigating something, or even your kid or your spuse etc.) can examine your browsing history from the cookies.

      Maintaining browsing privacy is no more paranoid than shutting the door on the public restroom while you're using it, even if you are not doing anything illegal or immoral in the restroom.

    17. Re:Yes, yes it does. by cmoney · · Score: 1

      So you would rather protect site visitation information, IE, information that can't really be used to hurt you TOO much, than information (credit card number) that can be used by any opportunistic person on the street and be at least a major inconvenience to you? That's logical.

    18. Re:Yes, yes it does. by phasm42 · · Score: 1
      Marketeers have to get over characterizing customers as consumers.
      .
      .
      .
      If companies can't remember the adage, the customer is always right, they may lose all contact with their consumers.
      Argh!
      --
      "No one likes working in a hamster wheel, and your shop smells of cedar shavings from here." - TaleSpinner
    19. Re:Yes, yes it does. by Anonymous Coward · · Score: 0

      And that's why you're completely retarded. If I really want to force a session-duration cookie down your throat, all I have to do is append it to each and every URL reference you're given, i.e.:

      http://site.com/app.php?SID=cookie

      Which is *exactly* the same thing as a session-duration cookie.

      Most likely what you should be looking for is a feature not to disable cookies entirely, but only to allow
      a) session-duration cookies ONLY, or
      b) cookies associated with websites that don't collect personal information.

      But way to go! You've knee-jerked all the way to the Luddite end of convenience.

    20. Re:Yes, yes it does. by Ender_Stonebender · · Score: 1

      If I thought it feasible, yes, I would. It's not feasible, so no, I don't.

      You could wear a mask. That would conceal your identity. (Unless you used your credit card, which would give away your identity. Oh, and it would make the security guys suspicious.)

      I trust my credit card company, because hey, it's their money I'm spending. If they decide to be bastards, then I'll just not freakin' pay 'em. ;-)

      Good luck getting another credit card after the first time you decide to pull that trick. You do know that all the credit-issuing banks communicate with the credit reporting agencies on a regular basis, right? And you do know what your credit score is, right?

      I know that a bank has legal limitations on how it can deal with customer information and I'm comfortable with those limitations.

      So? Legal limitations only mean that the police can arrest people who violate those limitations. This won't stop someone who is determined to become a criminal from doing things which, legally, banks are not allowed to do. I work for a bank. There's all kinds of things I could do that go beyond those limitations, but I don't do them.

      I have a grocery card. It says I'm a 57 year old black woman named "Monica". Or at least it did, I've traded with other people several times. Dunno who's identity I'm shopping with now. :)

      Great. Now the grocery chain is shipping the black currant jelly you like to whichever store the person to whom you gave your last card shops at, because they think you've moved. The grocery industry has extremely slim margins, and this kind of thing could put them out of business. Then, where will you get your black currant jelly?

      Your paranoia is not totally unjustified, however. If you were attempting to hide from, but I felt I needed to find you, these are exactly the kinds of information about you that I would attempt to get my hands on. If I know that you always go to the same place to fill your car's tank, I can simply camp out there until you show up. Same for grocery stores, convenience stores, etc. Does the convenience and savings you gain by using these things justify the risk that poses to you? To me, it does. If it doesn't to you, fine; but don't bitch about if I decide to take that risk for myself.

      Oh, and as for your issues with "targetted marketing" (targetted about the same way as a shotgun, from what I can tell!): If you're smart enough to realize that companies are going to attempt to target you, you're smart enough to figure out you don't need what they're selling.

      --Ender

      --
      Loose things are easy to lose. You're getting your hair cut. They're going there to see their aunt.
    21. Re:Yes, yes it does. by Otto · · Score: 1

      It's a simple matter of what I can protect by my actions.

      In order to purchase something online, I have to give that CC info. There's really no way around it. Once they have it, there's little I can do to stop them using it in various ways. I can take very little action to protect it at that point.

      Site visit info I can defeat myself, just by blocking/deleting cookies. So I do just that. If I can take some form of action to prevent them from storing my CC info, I do that too, but most online stores don't have that option.

      I would rather them not store any info about me at all. So I prevent them from storing what I can prevent them from storing, that's all.

      --
      - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
    22. Re:Yes, yes it does. by Otto · · Score: 1

      Good luck getting another credit card after the first time you decide to pull that trick. You do know that all the credit-issuing banks communicate with the credit reporting agencies on a regular basis, right? And you do know what your credit score is, right?

      My credit score is incredibly high. Mainly because I cancel credit cards when the card issuer starts being a dick. I stick with card companies who don't give me any problems.

      So? Legal limitations only mean that the police can arrest people who violate those limitations. This won't stop someone who is determined to become a criminal from doing things which, legally, banks are not allowed to do. I work for a bank. There's all kinds of things I could do that go beyond those limitations, but I don't do them.

      Agreed, but the consequences of those actions are pretty far reaching, therefore most banks don't have such issues. Really, this is a non-problem. I opt out whenever I can and don't deal with banks that screw people over. Do you do anything less?

      Then, where will you get your black currant jelly?

      I'm a grape man myself. :P

      --
      - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
    23. Re:Yes, yes it does. by rpresser · · Score: 1

      ... eventually anonymous buying services will provide the ability to mask your identity completely.

      Not if your friendly government has anything to say about it. According to the original PATRIOT act, you're not even supposed to be able to borrow books from the library anonymously.

    24. Re:Yes, yes it does. by Anonymous Coward · · Score: 0

      I'm sure that you're not suggesting that you buy things from websites that you dont trust.... SO, what are you saying exactly? You sound paranoid.

      And you sound profoundly naive and unthinking. Even if you do trust the site today, how do you know that you can trust all of the other entities with which that site may share your information? Further, how do you know that you will be able to trust the site tomorrow? Just because you seem to have little concern for your privacy doesn't mean everybody who does is paranoid.

    25. Re:Yes, yes it does. by corrie · · Score: 1
      Yep.

      If you have the *ability* to do it, then somebody in your organization eventually will decide that it sounds like a good idea

      I'm afraid I can't agree with you. This way of thinking make the person who wrote the fdisk command evil, since gives someone the *ability* to do evil. A disgruntled employee, for instance.

      In fact, fdisk shares the same characteristics as the cookie case:

      • It was written with a practical and useful purpose in mind
      • ...the intent of which is not malicious
      • Someone in an organization will eventually decide it sounds like a good idea to fdisk his bosses PC or laptop, out of spite because he got fired or something
    26. Re:Yes, yes it does. by bluGill · · Score: 1

      Because I decide if I trust you with my money after I know your prices, and get enough info on you to do my own research. If you are more expensive that someone else, I will never enable cookies for you. IF (not when) I decide to buy from you, then I will trust you with more information on me.

    27. Re:Yes, yes it does. by Cylix · · Score: 1

      Uh, not here, they are card nazi's.

      --
      "You should always go to other people's funerals; otherwise, they won't come to yours." -- Yogi Berra
    28. Re:Yes, yes it does. by Kazoo+the+Clown · · Score: 1

      Marketeers have to get over characterizing customers as consumers.

      .
      .
      .
      If companies can't remember the adage, the customer is always right, they may lose all contact with their consumers.

      Argh!


      Looks like I should have quoted the term in the last sentence-- I was arguing in their language, not mine.

      Or did I mis-read what the Argh! was referring to?...

  17. Hmmm by DarthVeda · · Score: 2, Interesting

    Seems like there was some lobbying effort once upon a time to make them the company's property. Obviously it did not get anywhere. Or maybe I'm dreaming, but I could swear I remember something along these lines in the past...

  18. Thanks by vivekg · · Score: 1

    Thanks! I just deleted all cookies from FireFox :D

    However, I find cookies very dangerousness on Public computer located in cyber cafes and libraries; so it is best to delete them.

    --
    The important thing is not to stop questioning --Albert Einstein.
    1. Re:Thanks by appavi · · Score: 1

      Actually you dont have to manually remove the cookies. If you setup the option of Keep Cookies until I Close Firefox then Firefox automatically clears the cookies when you close the browser. I have this option setup.

      In Firefox 1.1 has an option called Sanitize. Sanitize is invoked it clears the cookies, cache, history, saved form/password info. ya you can customize the items you want sanitize. you can also set the firefox to execute Sanitize option whenever you exit firefox.

  19. Flash tracking? like hell by Rosco+P.+Coltrane · · Score: 4, Insightful

    Flash-based tracking system is mentioned

    It doesn't seem to have dawned on marketers that many, many people already associate Flash with "annoying advertising", "high CPU usage for nothing" and "general nuisance", and that it is disabled in many browsers as a consequence.

    Speaking for myself, Flash is disabled. When I need it occasionally (that is, when I happen to want to play this about once a year), I re-enable it. But otherwise, I've yet to see a website sporting Flash that doesn't use it for useless eye-candy or advertising.

    --
    "A door is what a dog is perpetually on the wrong side of" - Ogden Nash
    1. Re:Flash tracking? like hell by metternich · · Score: 0

      I've always felt that Flash was very aptly named. Annoying things that "flash" on your screen... No thanks.

      --
      Facts do not cease to exist because they are ignored.
    2. Re:Flash tracking? like hell by melikamp · · Score: 1

      True that. My flash is still enabled, because I can suffer it after nuking ads with adblock on all sites I frequent. But I could as well disable it. The only flash site I can think of visiting is homestarrunner.com.

    3. Re:Flash tracking? like hell by supernova87a · · Score: 3, Informative

      Try the Flashblock extension! It's the best thing I ever downloaded for my Firefox. Keeps flash plugins from playing unless you click on them in the browser to start them. And for some reason I have never found that I want to click on one to deliberately see an ad...

    4. Re:Flash tracking? like hell by Nate+Eldredge · · Score: 1
      I used to think so, but I have found one very nice flash application. Major League Baseball has a flash app called "Gameday" which provides instant play-by-play of any baseball game. You can get the same thing as text from other sites, but their graphical thing is nice: you can see the game situation at a glance, click on players to find stats, even see the location of each pitch. There are some ads, but they're fairly unobtrusive. It's a very nice alternative to TV and radio which I find distracting if I'm trying to do something else. Since I use this on a regular basis, I have flash turned on now.

      Of course, there are plenty of annoying uses of flash. But luckily Firefox's adblock plugin can block them selectively.

    5. Re:Flash tracking? like hell by Rosco+P.+Coltrane · · Score: 1

      Wow, that's the best piece of advice I've had in a year. Thanks!

      --
      "A door is what a dog is perpetually on the wrong side of" - Ogden Nash
    6. Re:Flash tracking? like hell by Anonymous Coward · · Score: 0

      Flash would be a little bit less annoying if they didn't unnecesarily require javascript to activate most of them.

    7. Re:Flash tracking? like hell by rainmayun · · Score: 2, Interesting

      I suspect that amongst the non-technical sheeple, some may have figured out enough to know that Flash = annoying advertising, but probably very few know enough about how their computer operates to figure out that it's slowing the CPU down, or even how to monitor CPU usage, or distinguish CPU slowdown from disk cache slowdown from net lags from normal operation of the computer. And of those few, if they're using IE, they probably have no idea how to disable it.

      Sad to say, Flash as a technology is pretty cool, but the way it gets used in practice is pretty depressing, most of the time. I've worked on some cool Flash apps in my day, but those days are pretty much behind me.

    8. Re:Flash tracking? like hell by hazzey · · Score: 1
      and that it is disabled in many browsers

      As far as I know, there is not flashblock for IE. This means that ~92% of the browsers out there do not block it. And so it should work great for tracking.

    9. Re:Flash tracking? like hell by Anonymous Coward · · Score: 0

      I used to use Adblock to handle annoying Flash ads. I may switch to this. Apparently, allowing any Flash ad (even the first time) opens me up to a significant risk.

    10. Re:Flash tracking? like hell by Rosco+P.+Coltrane · · Score: 1

      By disabled, I meant uninstalled.

      --
      "A door is what a dog is perpetually on the wrong side of" - Ogden Nash
    11. Re:Flash tracking? like hell by TomorrowPlusX · · Score: 1

      You know, I don't think most people really hate flash with the all-consuming, burning fearsome hate that you do. You know, the kind of hate you seem to have, where I can just imagine you waking up in the middle of the night, white-knuckled, screaming about how to your dying breath you vow to kill every flash player you see, and to educate the masses about it's evils.

      I think most people look at a flash animation and think how cool it is that they can see nice animations, without a huge download, and they can play games, etc etc. Sure, banner ads are annoying, but they're annoying when they're not animated, too.

      And who the hell really cares if an ad is taking up some CPU. It's not like I'm paying by the cycle here, it's essentially free. I scroll off the page and it stops. Big deal. "Oh noes, the flash ad is taking away 3 seconds of valuable processing time from seti-at-home".

      And, before you say "not everybody's on a god-box", it should be mentioned this is coming from somebody on a fairly meager old 12" powerbook.

      OK, I'm ranting, but I'm tired of everybody who says they've blocked flash getting a +5 insightful. It isn't insightful. It's about as insightful as when people whinge on an on about how enlightened they are for not having a TV set, or cable, or how they don't like pop music ( by the way, I'm guilty of all that and more ).

      --

      lorem ipsum, dolor sit amet
    12. Re:Flash tracking? like hell by 14erCleaner · · Score: 1
      I've yet to see a website sporting Flash that doesn't use it for useless eye-candy or advertising.

      I almost agree with this, but homestarrunner and ubergeek.tv are pretty entertaining. For everything else, I use Flashblock with Firefox and all is fine and dandy with the world.

      --
      Have you read my blog lately?
    13. Re:Flash tracking? like hell by Anonymous Coward · · Score: 0

      "It doesn't seem to have dawned on marketers that many, many people already associate Flash with "annoying advertising", "high CPU usage for nothing" and "general nuisance", and that it is disabled in many browsers as a consequence."

      Disabled by default is an understatement -- I've stopped using browsers because they don't support Flash-blocking...

    14. Re:Flash tracking? like hell by typical · · Score: 1

      You know, I don't think most people really hate flash with the all-consuming, burning fearsome hate that you do.

      You are correct. That set of non-hating people consists of the people who don't know what Flash is.

      --
      Any program relying on (nontrivial) preemptive multithreading will be buggy.
    15. Re:Flash tracking? like hell by Compass · · Score: 0

      As of now I'm not using Flash anymore. I didn't care much about it since I have lots of anti-spam methods, but since Flash can now be used almost the same way as cookies for tracking reasons, no thanks.

      My privacy is mine, not yours.

      Compass.

    16. Re:Flash tracking? like hell by Anonymous Coward · · Score: 0

      No no no...try adblock instead. You can still have flash (unless you are completely against flash) without having to click to play everything and with adblock it also blocks the other non-flash images and iframes from the same annoying advertisers.
      ~Gildas

  20. That's not the intended purpose of cookies by dpbsmith · · Score: 5, Informative

    Cookies were intended to allow sites to serve users by providing a convenient method of preserving client-side state.

    They're intended to do legitimate things like let a site remember who you are so you don't need to log in every time you visit it, or assign a transaction code to make it easy for things like shopping carts to work... and prevent you from double-ordering if you click the "Order" button twice.

    They were never intended for the purposes to which marketers have misappropriated them.

    It's just another example of information being ostensibly collected for a purpose the user approves of, and then being secretly used for purposes the user is unaware of and might not approve of, and it justifiably makes people angry.

    1. Re:That's not the intended purpose of cookies by twifosp · · Score: 1
      Exactly what is wrong with retailers using cookies to determine information about their users and customers?

      So cookies gather information about demographics, statistics, and probability for people to buy things. So they use this information to try and make a buck off of you.

      Exactly HOW is this different than any other form of commercial advertising in this world today? Now I hate using that "the precident has been sent already" arguement. But no one is actually taking anything away from you that you didn't already provide. 1. You connected to someone's website, and they sent you data and requested data. You still control what you send and what you don't send.

      2. Assuming they use the information to market specificaly towards you and people like you, they aren't forcing you to buy anything. If you fall for marketing, custom tailored or not, odds are you wanted the product anyway. If you didn't and the marketing "tricked you" then controlling your personal information is the least of your worries and you need evaluate your consumer whore life style.

      I'm just having a real hard time finding the expressed evil in cookies, and information/demographic gather in the first place when everyone controls their own level of involvement and commitment based on what they chose to buy.

    2. Re:That's not the intended purpose of cookies by Evro · · Score: 2, Informative

      The most common use for cookies today is as unique session identifiers on websites. This includes shopping carts on e-commerce sites, and sites like Slashdot. It's just a way to associate information on the user's machine with information on the server's machine. I don't see how it's "intended" for any particular use. Tracking a user's movements within a site seems logical to me, and in many cases doesn't require a cookie. Tracking a user's activities across websites via a cookie set by a company like Doubleclick is another matter.

      It just seems like you're getting in a huff because cookies have somehow been "perverted" from their original intended use. I'd suggest that cookies didn't have any "official" intended use, but were created as a way to retain persistent information across a stateless protocol, which is what they do. Whether they're used for good or evil is another matter entirely, just like any technology.

      --
      rooooar
    3. Re:That's not the intended purpose of cookies by Anonymous Coward · · Score: 0

      How is this different? The computer user can do something about it, that's how.

      Don't tell me you like being tracked. You may not be able to come up with ways in which this information can be used against you, but it is generally accepted that knowledge gives an advantage, and no businessman will refrain from turning that advantage into more money for himself. There's only one place where this money can come from: your pockets.

    4. Re:That's not the intended purpose of cookies by gstoddart · · Score: 1
      Cookies were intended to allow sites to serve users by providing a convenient method of preserving client-side state.

      They're intended to do legitimate things like let a site remember who you are so you don't need to log in every time you visit it, or assign a transaction code to make it easy for things like shopping carts to work... and prevent you from double-ordering if you click the "Order" button twice.

      Specifically, it's an attempt to add state to the state-less protocol which is HTTP.

      I agree with you, the function of cookies is not "to help marketers make better websites". It's a technical solution to a technical issue, and marketing had nothing to do with their inception.
      --
      Lost at C:>. Found at C.
    5. Re:That's not the intended purpose of cookies by davidsyes · · Score: 1

      I may be mistaken, but I find it lamentable that ms has/had chosen to make it impossible for users (well, at least of corporate set-up boxes) to delete their history, cache, and cookies.

      So, in workplaces where most employees leave for lunch, whether or not a machine is locked at the keyboard is pointless if a thief has access to steal the machine.

      Internally, one only need distract an employee, peruse their cache, then walk away.

      I suppose employees could set the browser to delete cookies and clear the cache after x amount of time, but (proxy) loggers will have gotten then information before an employee can purge it-- assuming the IT department is "on the ball".

      Maybe this serves to warn employees to suffer and simply try not to surf for almost ANYthing from work. Why? Well, why let your employer daily glimpse into your personal life? You might be entrepreneurial, and your before-work, lunchtime, and after-hours habits will reveal your interests.

      Also, lock your keyboard so no one can use your machine to surf questionable sites and implicate you intentionally or carelessly in non-blocked but company-disliked sites. It's happened to others, and can happen to you...

      --
      Previously: "Linux... Toward the Sunrise..." Now: "Linux... Toward the-- No, now, part of Every Sunrise"
    6. Re:That's not the intended purpose of cookies by twifosp · · Score: 1
      Don't tell me you like being tracked. You may not be able to come up with ways in which this information can be used against you, but it is generally accepted that knowledge gives an advantage, and no businessman will refrain from turning that advantage into more money for himself. There's only one place where this money can come from: your pockets.

      Eh, that's making the assumption that BECAUSE they track me, I WILL 100% spend money that I hadn't otherwise intended to spend.

      This arguement is invalid for two reasons:
      1. The consumer chooses what they spend their money on. If this choice comes from want, need, or marketing techniques, the choice is ALWAYS in the hands of the consumer. They are never forced to spend their money.
      2. Assuming that the consumer decided to spend the money, how do you know the marketing techniques involved from cookie data collection didn't help that person buy the product they wanted. If they were intent on buying it anyway based (see #1), then how is the businessman doing the consumer harm by better providing his products and services to the consumer?.

      You people act like everyone out there selling something and advertising is evil. People want products, and other people want to provide those products and make a buck off it.

      The same people who are crying foul about cookies are probably the SAME people praising google for their innovative business techniques.

      Google will soon become the biggest marketing company the world has ever known. They will know what you search on, where you like to go, where you do go, where your friends go, and use this information to provide ads based on YOU and the content you're currently looking at (google ads).

      It's already happening. If cookies are evil, then google is Darth Fucking Vader.

    7. Re:That's not the intended purpose of cookies by Anonymous Coward · · Score: 0

      The shop owner / marketer will learn something about you which he didn't know before. That puts him in a position where he can make more money (otherwise he wouldn't do it). There's only one place where that money can come from.

      In order to understand that, it is absolutely not necessary to show ways how the shop owner would get more out of you than you were willing to pay. Some ways are really obvious, some have already been tried, but for the sake of understanding that being tracked is bad for you, the details are irrelevant.

      I agree that Google will be a nightmare come true when (not if) they chuck their company motto.

    8. Re:That's not the intended purpose of cookies by |/|/||| · · Score: 1
      You connected to someone's website, and they sent you data and requested data. You still control what you send and what you don't send.
      Exactly. I control whether my computer stores and sends cookie data. As it should be. You say that it's not a problem as long as "everyone controls their own level of involvement and commitment" - OK, my chosen level of involvement is 0% and my commitment is 100% opposed. What is my simple option for making sure that my wishes are fulfilled? There isn't one, but there should be.

      I certainly wouldn't call using demographics and statistics for marketing purposes "evil," but I do call it "obnoxious." It shouldn't be illegal, but it should certainly be socially unacceptable. Think that most people should be fine with it? Then make it opt-in. The way I see it, almost everything should be opt-in. Maybe there's nothing wrong with collecting data about me, but you ought to get my permission first.

      Perhaps opt-in data collection schemes are doomed to fail, but if they do then you have to concede that they shouldn't exist to begin with. The people will have spoken. On the other hand, opt-in data is probably going to have a lot less garbage in it.

      Assuming they use the information to market specificaly towards you and people like you, they aren't forcing you to buy anything.
      I'm not concerned about being "forced to buy" something. I'm concerned about giving support (via valuable information) to someone who is engaging in something that I despise. I find advertising to be distasteful and offensive. I don't fight back against "consumer profiling" only out of concern for privacy, I also fight it because it is a tool of advertising. I whitelist my cookies for the same reason that I change the station when a commercial comes on. Why would I want to sit and listen to a commercial? Why would I want to help someone's advertising campaign by storing a cookie? Why would I want to help doubleclick continue to exist?

      --
      [javac] 100 errors
    9. Re:That's not the intended purpose of cookies by drooling-dog · · Score: 1

      Gee... For once I'm just too angry to respond in a reasonably civil and polite manner. Since all I can think of right now is some off-label uses for a baseball bat in a dark alley, I'd better stop here...

    10. Re:That's not the intended purpose of cookies by Anonymous Coward · · Score: 0

      If you know that you shouldn't trust them with this information, why do you do so? Why wait until (when, not if) they do something bad with it before you stop?

    11. Re:That's not the intended purpose of cookies by Anonymous Coward · · Score: 0

      Who says I do? It's just that me deleting their cookies, using other search engines as well, blocking Adsense and not using other more personal Google products isn't going to stop Google.

  21. Marketer's perspective? by Profane+MuthaFucka · · Score: 0, Redundant

    a good overview of life from the marketer's perspective

    I'll be interested when the overview of life from the marketer's perspective is "OH GOD IT BURNS IT BURNS MAKE IT STOP PLZ!!"

    --
    Fascism trolls keeping me up every night. When I starts a preachin', he HITS ME WITH HIS REICH!
    1. Re:Marketer's perspective? by Shadow+Wrought · · Score: 2, Funny
      Oooh! Something shiny! ...

      Wanna buy it?

      --
      If brevity is the soul of wit, then how does one explain Twitter?
  22. Ahhh...Jupiter Research by NadNad · · Score: 1

    Nothing warms the cockles of my heart like hearing a spammer bleating about how it's the user's fault a broken model of electronic commerce isn't working.

    1. Re:Ahhh...Jupiter Research by GigsVT · · Score: 1

      Yeah, I get that same feeling when someone whines on slashdot about how they want protectionist policies to keep jobs from going overseas.

      --
      I've had enough abrasive sigs. Kittens are cute and fuzzy.
  23. My Hosts File Thanks You by no+soup+for+you · · Score: 1

    The same United Virtualities that caused me to enter into my hosts file because it kept crashing firefox (1.03 with FlashBlock 1.2.9)?

    127.0.0.1 sp21.unitedvirtualities.com

    I can't wait.

    --
    If you blog it...
  24. Marketers should have to work for their money by one_who_uses_unix · · Score: 1

    I think that his complaints are mostly on target - the problem is with his perspective. He thinks that the users "owe" him the ability to effortlessly track them.

    This is simply a variation on an ancient marketing problem. How do I get people to see what I want to sell and convince them that they need it. The only difference is the technical context.

    --
    KK4SFV
    1. Re:Marketers should have to work for their money by rgriff59 · · Score: 1
      This is simply a variation on an ancient marketing problem.
      Exactly! I fail to understand the whole "this data is essential" mentality. Somehow, real physical stores have judged the effectiveness of their layout, advertising and pricing without having to tag every customer. Granted, there are trends in that direction, but all the tracking that can be done will not compete with offering something worthwhile, treating your customers well and giving them a good deal. You can watch virtual customers through the logs as well as you can watch physical customers through the aisles. I'm sure someone would like to know I saw the same ad in two different magazines, too, but somehow the industry has survived without a way to automatically collect that data.

      (At least this article reminded me I hadn't trashed the cookie folder in a while.)

  25. Belly size by AutopsyReport · · Score: 1, Funny

    Judging by the size of the average American belly, I can't see how cookies have lost their effectiveness.

    --

    For he today that sheds his blood with me shall be my brother.

  26. DNC List by DisasterDoctor · · Score: 1

    How do I signup on the Federal Do Not Cookie List?

    1. Re:DNC List by Compholio · · Score: 1

      How do I signup on the Federal Do Not Cookie List?

      Actually, such a thing (in reverse) would probably make a good Firefox plugin. We'd need someone(s) with enough bandwidth to host the global list of evil cookie users but then when people report someone as abusing the cookie capability everyone would get to benefit.

  27. Deceptive ratings by Anonymous Coward · · Score: 0

    Still, the article is a good overview of life from the marketer's perspective.

    I came to this website in good faith based on its publicised Immature rating, and now I find that clicking a link can unlock disgusting insights into a marketer's perspective. Children reading this could become desensitised to marketing and then go on a marketing spree themselves. Wait until Hillary hears about this.

  28. Good Thing by Nom+du+Keyboard · · Score: 1
    that Internet marketers are worried about the decreasing persistence of cookies.

    And this is a good thing, make no mistake! I don't exist simply to be prey for marketers, regardles of how they may want to feel about it! Anything that disrupts them is good.

    --
    "It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
  29. Sigh, when will marketers actually read Kotler? by TERdON · · Score: 0, Offtopic
    Standard marketing litterature at the universities:

    Philip Kotler et al: Principles of Marketing.

    There is ONE thing you should learn of that 850 pages book:
    4P: Product, Price, Promotion, Place .

    If you don't have all of them, you aren't going to get your product sold - unless the rest of the market is even worse. When are actually "marketers" trying to get me to buy their products with something else than Promotion (ie commercials)?

    ------------

    #ifdef Flame_RIAA
    The record companies are among the worst here. They only have one right, and three totally wrong. They do get the "promotion" part. But the other three...

    Product: we want decent non-DRM digital files, not plastic pieces or DRM shit.
    Price: Too expensive. Pirating is gratis (except for the unusual catch of **AA).
    Place: You insensitive record company clods, we want to buy our music online, with instant delivery through download!
    #endif

    --
    I have a really elegant proof for Fermat's last theorem. If this sig was only a bit longer...
  30. Marketer's perspective? by Migraineman · · Score: 1

    "Life from the marketer's perspective" goes something like this, perhaps?

    Exploit others ...
    Exploit others ...
    Exploit others ...
    Gotta pee ...
    Exploit others ...
    Oooh! Something shiny! ...

  31. Ah here it is. by DarthVeda · · Score: 1

    HR 2281

    I assume this has long since been defeated. Otherwise it would "prevent computer users from protecting their privacy online by removing cookies from their computer. Additionally, if cookies are used as a copyright protection system it would be unlawful to manufacture a device that removes the cookie from the system."

    1. Re:Ah here it is. by Anonymous Coward · · Score: 0

      so not only is your shift button a copywrite infringement device, but also could have been your delete key, soon, we'll all have keyboards with one key, the 'any' key.

  32. a bit different by 3CRanch · · Score: 0

    Maybe the difference could be that they are tracking/monitoring/whatever your usage on their site vs. spyware that tracks your overall usage. I'm not sure if I'd mind them knowing that I prefer page X on their site. Its a lot different then spyware watching all my activities and generalizing my usage for potential advertisers to exploit.

  33. Dynamic IP's. by KitesWorld · · Score: 5, Informative

    How many visitors are on an old dial up connection or connecting via proxy? I.P. numbers simply aren't a reliable way of providing usage statistics.

    1. Re:Dynamic IP's. by Compholio · · Score: 2, Interesting

      How many visitors are on an old dial up connection or connecting via proxy? I.P. numbers simply aren't a reliable way of providing usage statistics.

      Well, then get the marketers to push for IPv6 - which has absolutely no support for dynamic addresses. Plus, with a delete-age of almost 40% I imagine that using your IP is just as effective as a cookie.

    2. Re:Dynamic IP's. by KitesWorld · · Score: 1

      True, but using a cookie doesnt give you a single uber-customer that buys n hundred copies of a particular textbook - which later turns out to be n hundred distinct users on a college campus. :)

    3. Re:Dynamic IP's. by oldmacdonald · · Score: 1

      Hmmm, why couldn't it? How about a service for swapping cookies in order to poison the pool of data, similar to swapping store loyalty cards, but automatically done by the browser?

    4. Re:Dynamic IP's. by a_n_d_e_r_s · · Score: 1

      Yes why not - someone write a Firefox plugin who does this please!

      --
      Just saying it like it are.
    5. Re:Dynamic IP's. by Anonymous Coward · · Score: 0

      How many visitors are on an old dial up connection or connecting via proxy? I.P. numbers simply aren't a reliable way of providing usage statistics.

      And, being on dialup, this is my problem because...

  34. Cookies are a SOMETIMES thing! -- Cookie Monster by Anonymous Coward · · Score: 1, Funny

    Even the Cookie Monster on Sesame Street has been forced to admit, "Cookies are a SOMETIMES thing!"

  35. The spyware-cookies connection by kawika · · Score: 1

    Most antispyware utilities also remove tracking cookies by default, and most users never change the defaults, so tracking cookies are being removed. If there wasn't so much truly dangerous spyware out there today, the nuisance caused only by tracking cookies wouldn't be the effort to fix. But as long as users bought something that cleans it all up they're going to use it.

    Also, unscrupulous antispyware companies are sometimes using tracking cookies to scare users into buying something. Just put "spyware" into Google and look at the ads, then run one of their free scans. The more they detect, the more they scare users, and the better their chances of making a sale.

    What it comes down to for both spyware and cookies is the same thing. What is the benefit TO THE USER of having this stuff on their computer? If there is none then it should be gone and the marketeers should figure out a better incentive.

  36. Fun with Cookies by RagingChipmunk · · Score: 5, Interesting

    Every once in awhile I like to toy with the cookies. I'll edit their content - flip some bytes, add lots of corrupt text, delete sections. Occasionally, I'll flip all the cookies to "Read Only". Its fun to see a site occasionally puke from bogus cookie data.

    --
    The only PT Boat Journal on the web: http://www.PT171.org
    1. Re:Fun with Cookies by KillShill · · Score: 4, Interesting

      sounds like a perfect idea for a firefox extension.

      maybe some smart "cookie" can code one up in an afternoon...

      --
      Science : Proprietary , Knowledge : Open Source
    2. Re:Fun with Cookies by typical · · Score: 1

      Now *that* is a cool idea (privoxy has a feature that lets fake cookies be sent back, or "jars" of cookies be exchanged with other users to screw up databases), but the idea of just corrupting all the cookies for sites not in a whitelist just makes me happy as a clam.

      --
      Any program relying on (nontrivial) preemptive multithreading will be buggy.
    3. Re:Fun with Cookies by Anonymous Coward · · Score: 0

      I'm sure it's a fun pastime, but if corrupting cookie data becomes widespread, it won't be long before some buggy site gets its database corrupted as a result, and the owners sue the user who sent the "malicious" cookie... but I'm confident that there's little chance that they could demonstrate any malicious hacking intent in court.

    4. Re:Fun with Cookies by jonadab · · Score: 1

      > I like to toy with the cookies...

      Some people have too much free time on their hands. I just set the preference that limits the maximum lifespan of cookies and let that be that.

      --
      Cut that out, or I will ship you to Norilsk in a box.
  37. Isn't that the point? by tuxedobob · · Score: 1

    I thought the point of deleting cookies was to screw up marketing and people leaving pieces of themselves on your computer that you don't want?

  38. That's not the intended purpose of my daughter by interiot · · Score: 1

    And PSP UMD disks were never intended to illegitmate things like porn. And PSP was never intended to play MAME. People should never misappropriate things, they should only do things that are strictly in accordance with the original author's world view.

    1. Re:That's not the intended purpose of my daughter by KillShill · · Score: 1

      and since you paid 250-500 bucks for a psp... how does anyone but you have any say in what it's used for?

      cookies don't fit this analogy. if you need me to explain why, just turn in your geek card and hang your head in shame.

      --
      Science : Proprietary , Knowledge : Open Source
    2. Re:That's not the intended purpose of my daughter by NickFortune · · Score: 1

      I think the GP disaproves more of the willful deception of the general public than than of unforseen uses being found for technology

      --
      Don't let THEM immanentize the Eschaton!
  39. Pity the poor suitwankers. by lheal · · Score: 1

    [suitwank]
    It's tough enough getting rich without people hiding. Don't those cookie-deleters know that it's all about relationships? What do they think, we'll sell information about them to a spammer? We use only legitimate email marketers.
    [/suitwank]

    I don't want a relationship with an online vendor. I don't want a relationship with a car salesman. I just want to be shown a product and given a price. I'll decide if I want it.

    I don't mind good service, but that's not what the suitwankers want to do with my information. They uniformly want to sell me something I don't want. Remember what I bought so you can fix it if it breaks or I want an upgrade, but don't try to sell me something just because I bought something else.

    --
    Raise your children as if you were teaching them to raise your grandchildren, because you are.
  40. Tinfoil hat security... by MosesJones · · Score: 4, Insightful


    Why should I? I don't know you

    Do you know your bank? I mean apart from the front-end office that takes your money?

    Do you know VISA, AMEX, Mastercard or whatever credit card you use?

    If you have the *ability* to do it, then somebody in your organization eventually will decide that it sounds like a good idea.

    And this is paranoia on crack... it assumes that people will ALWAYS do the wrong thing and will ALWAYS try and screw you about, and that customer profiling NEVER results in a better service.

    Feel happy in your paranoia, me I just assess risk on a site by site, and business by business basis.

    --
    An Eye for an Eye will make the whole world blind - Gandhi
    1. Re:Tinfoil hat security... by Otto · · Score: 1

      Feel happy in your paranoia, me I just assess risk on a site by site, and business by business basis.

      How in the hell is that any different from what I actually said? I delete all cookies, and whitelist the people I trust to not delete their cookies. Is that any different from "assessing risk on a site by site basis"? Once I feel comfortable that he's not going to abuse this info, then I might whitelist him. Until then, why in the hell would I want to give him the capability to track my browsing easily?

      --
      - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
    2. Re:Tinfoil hat security... by MosesJones · · Score: 1

      Once I feel comfortable that he's not going to abuse this info, then I might whitelist him.

      That isn't assessing risk on a case by case basis, its ASSUMING high risk and contravention and only later opening up.

      Assessing risk on a case by case basis would mean you think both +ve and -ve and get to an answer. Saying NO! everytime just indicates that you are either paranoid or work in Microsoft desktop support.

      --
      An Eye for an Eye will make the whole world blind - Gandhi
    3. Re:Tinfoil hat security... by Cerberus7 · · Score: 1

      Or he's a network admin. Only open the ports you need, deny everything else.

      --
      I don't know about you, but my servers run on the power of cotton candy and happy thoughts. -Anonymous Coward
    4. Re:Tinfoil hat security... by periol · · Score: 2, Interesting

      And this is paranoia on crack... it assumes that people will ALWAYS do the wrong thing and will ALWAYS try and screw you about, and that customer profiling NEVER results in a better service.

      I fail to understand why people like you refer to corporations as people. I will trust any single individual more than I will ever trust any corporation. Corporations exist to extract as much money from me as possible. That's it.

      I think it is a safe assumption that corporations will *always* end up doing some things wrong, and will *always* end up making a decision at some point that compromises what is best for me (or the world in general) in order to make a profit.

      It's not the people in the corporation. I would probably get along with most of them if we ever met. I also realize that corporations are a necessary evil, because many of the products I currently enjoy could only be manufactured by large corporations. That doesn't mean the corporations in any way care about me.

      They only care about my money.

      I'm not being paranoid, I'm just being realistic.

    5. Re:Tinfoil hat security... by Spazmania · · Score: 1

      And this is paranoia on crack... it assumes that people will ALWAYS do the wrong thing and will ALWAYS try and screw you about, and that customer profiling NEVER results in a better service.

      If SOME of the people do it SOME of the time, its still a problem.

      Also bear in mind that the purpose of customer profiling is improved sales conversion, that is getting you to part with more of your money. Customer service is an incidental goal, used only to the extent that it encourages you to come back and spend more.

      Do you know your bank?

      While I don't "know" the folks at the various banks I use, there are several things I DO know:

      1. The credit card folks can't yet correlate WHAT I purchased; they can only correlate WHO I bought it from and use that to create abstract categories.

      2. Since my deposit accounts, mortgage and credit cards are all held by different banks, they can't correlate information between them.

      3. When I don't want anyone to know at all, I can and do use cash. Perhaps this foils my credit card's attempt to suggest other purchases I might be interested in. Good!

      --
      Moderating "-1, Disagree" is simple censorship. Have the guts to post your opinion.
    6. Re:Tinfoil hat security... by sleepingsquirrel · · Score: 1
      And this is paranoia on crack... it assumes that people will ALWAYS do the wrong thing and will ALWAYS try and screw you about, and that customer profiling NEVER results in a better service.
      Well, either you can guess about how pure their motives are, or you can read their words and try to infer one. I, for one, am thinking they aren't so saintly...
      In March, United Virtualities (UV), a New York-based digital marketing company, became one of the first to release a substitute.

      "It gives you accurate counting of users, impressions and clicks," company founder Mookie Tenembaum says of the Persistent Identification Element (PIE). The technology, which is already being used by UV clients, both restores original cookies and places Macromedia Flash MX files on users' computers that can't be as easily deleted.

    7. Re:Tinfoil hat security... by Anonymous Coward · · Score: 0
      I fail to understand why people like you refer to corporations as people.

      Because we're not paranoid nutjobs and we grasp the concept that corporations are groups of people? What else would they be? Dogs? Squirrels? Atonomous kill-bots? Last time I checked people were the only sentient beings around. Corporations, at worst, provide anonymity for individual decisions makers. But it is my no means impossible to pierce that anonymity, nor often is it even difficult. In the same way that you depersonalize some people as "corporations" they depersonalize you as "a consumer". Once you break that cycle things will be a whole lot easier for you.

    8. Re:Tinfoil hat security... by periol · · Score: 1

      Because we're not paranoid nutjobs and we grasp the concept that corporations are groups of people? What else would they be? Dogs? Squirrels? Atonomous kill-bots?

      Sometimes, the simplest definition will leave out too much information. Like liability, for instance.

      In case you need it spelled out... In general, management of publicly traded corporations are thought to have a fiduciary duty to always increase the amount of profit made. This is because the owners of the corporation, the stockholders, are interested in "buying low and selling high", and the main driver in the long term of a rising stock price is increasing profits (and the perception that the profits will continue to increase). Most corporations have set their entire focus and pay of all management to this focus, via things like stock options and other bonuses. Thus neither stockholders nor management are primarily concerned about how large or profitable a corporation currently is, but how much more profitable it can become. Critics of corporations say that this drive for increasing profitability puts pressure on corporations to break the bounds of morality and do things like harm the environment.

    9. Re:Tinfoil hat security... by Otto · · Score: 1

      Because we're not paranoid nutjobs and we grasp the concept that corporations are groups of people?

      Yes, exactly. And groups of people are capable of making decisions that no individual in that group would consider reasonable, sane, or even good.

      Have you never been involved on a committee? :P

      Corporations, at worst, provide anonymity for individual decisions makers.

      Decisions made in larger organizations generally don't have single decision makers, they produce teams to make decisions, or a board and such. These people work off recommendations of other teams, and in the end, they can make decisions that are incredibly stupid and which any one person would be able to look at and say "what the fuck were you people thinking?"

      The point here is that a person is generally sane. But a group is generally a mob. Groups behave differently than individuals, and they do so in fundamental ways. Groups can even commit great evils without blinking, so you always have to be careful when dealing with a group, or a corporation.

      --
      - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
    10. Re:Tinfoil hat security... by Anonymous Coward · · Score: 0

      "Do you know your bank? I mean apart from the front-end office that takes your money?"

      Yes I do. I have met the bank manager / owner on several occaisions & it was he who personally approved my mortgage. It is a small family-run bank that has been in the same family for over 100 years. Otherwise i would not bank there.

      "Do you know VISA, AMEX, Mastercard or whatever credit card you use?"

      No.... I do not. And that is precisely why i do not have any credit cards, nor will I ever have one.

      "And this is paranoia on crack... it assumes that people will ALWAYS do the wrong thing and will ALWAYS try and screw you about, and that customer profiling NEVER results in a better service."

      My experiences with Bank of America, UMB, Bank Midwest, and numerous other big-name banks has told me that its NOT paranoia to assume that these companies will rip you off at every opportunity, because they WILL.

      Generally, the smaller the business, the hungrier they are for new customers, and the less likely they are to bend you over for a quick buck.

    11. Re:Tinfoil hat security... by Anonymous Coward · · Score: 0

      And this is paranoia on crack... it assumes that people will ALWAYS do the wrong thing and will ALWAYS try and screw you about, and that customer profiling NEVER results in a better service.

      Well good luck trying to convince me that this is not true for marketers.

    12. Re:Tinfoil hat security... by ArcticFlood · · Score: 1

      There's a Firefox extension that finds your Local Shared Objects directory and allows you delete them. Only problem I noticed is that the remove all button doesn't work (FF1.0.4 Fedora Core 3). It doesn't work on Deer Park Alpha, though.

      --
      This is here so you don't ignore the last two lines of my posts.
    13. Re:Tinfoil hat security... by stonedonkey · · Score: 1

      Corporations exist to extract as much money from me as possible.

      Then they must not be doing a very good job, since you're still alive...

      Consider the notion that a corporation is not, in fact, interesting in turning your pockets out. Competition may force them to charge less than they would like. Monopoly may allow them to charge more than they should. But believe it or not, there are people within these organizations who are interested in serving the customer to the best of their ability. People who actually enjoy providing a quality good or service. I know, such notions are shocking.

      But just as being independent does not necessarily grant a person authenticity or talent, being a corporation or the member of a corporation does not necessarily cause bloodthirsty avarice.

    14. Re:Tinfoil hat security... by Anonymous Coward · · Score: 0

      "And this is paranoia on crack... it assumes that people will ALWAYS do the wrong thing and will ALWAYS try and screw you about, and that customer profiling NEVER results in a better service."

      well 2 points on the tinfoil analogy.

      1. tinfoil doesn't stop people from reading your mind because it's a solution to an imagined problem. cookies are a demonstrable problem. look at doubledick.

      2. when it takes no effort or cost on my part to simply avoid cookies, why would i want to. while not everybody will abuse them - some do. it takes far more effort on my part to keep track of what companies are dicks and which aren't then it does for me to simply disallow all of them.

    15. Re:Tinfoil hat security... by boomkitty · · Score: 1

      it assumes that people will ALWAYS do the wrong thing and will ALWAYS try and screw you about, and that customer profiling NEVER results in a better service. I'll focus on the first two absolutes. If you're in the U.S. or Canada, then you're living in a capitalist society. If the wrong thing makes you a buck (or a hundred thousand bucks), you'll be rewarded as if you're doing a good thing. Lines get hazy, and people get screwed about. It's not paranoia to accept this; it's just acknowledging the way of things. Personally, I'd rather not have my whereabouts tracked without my consent.

    16. Re:Tinfoil hat security... by Anonymous Coward · · Score: 0
      Critics have many more criticisms than that. This focus also puts pressure on short term gains, rather than long term profitability. This is often made worse by short tenures of CEOs hired by the board of directors (a CEO that only expects to be in that position for 5 years, probably doesn't care much about the potential growth of the company over any longer timespans than that).

      The result is, that the company might sell off it's customer list just to make the current quarter look good on the financial sheets, even if the backlash will end up harming future quarters.

    17. Re:Tinfoil hat security... by Guppy06 · · Score: 1

      "And this is paranoia on crack... it assumes that people will ALWAYS do the wrong thing and will ALWAYS try and screw you about, and that customer profiling NEVER results in a better service."

      It's not paranoia, it's cynicism. Paranoia is irrational because it's foundless. Cynicism is inherently based on past experiences.

  41. Why not? by Otto · · Score: 2, Insightful

    I'm sure that you're not suggesting that you buy things from websites that you dont trust....

    Why not? Buying things online means, at worst, giving out info from a credit card. If they prove untrustworthy, then I call up the credit card company and reverse the charge. Trust does not have to be involved to engage in a purchase. You buy from people you don't any basis of trust for all the time.

    However, WTF would he need to know I came back to his site later? WTF would he need to know that I visited his site several times over a period of a week and eventually purchased something? Why would he need to know what products I looked at each of those times I visited? That information could be used to build up information about me that I might not want him to have. He doesn't have need for that information, and since I don't trust him, I should attempt to deny him the ability to collect that information.

    Furthermore, if he's a marketer, he can place his ads on several sites and track me via cookies from site to site. He can see what sites I frequent, he can see my reading habits... once I buy something from a site, he can track that and correlate all this to my identity.

    I'm not paranoid, because I don't think anybody is actually doing this sort of thing at the moment. However, the capability is there. I remove cookies to make this sort of thing that much harder to accomplish. Not because I think they are doing it, but because the potential is there for them to do it.

    --
    - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
    1. Re:Why not? by Miros · · Score: 2, Insightful

      Do you shop more than once at the same store? gas station? cvs? etc? What is the differnce between a cookie, and a clerk who recognizes your face? I mean, I completly understand your love of privacy, and I believe that it is your right to keep that information to yourself if you want to. But at the same time, your WTFs ask for a why; the why is simple. If they know their customers a little better, they can improve their business, just as any salesman who recognized a regular customer would. But if you feel better always being a stranger then I dont see any problem with that. But ultimatly, most users would probably enjoy the massive improvments in customer expierience that could be achieved using this information.

    2. Re:Why not? by periol · · Score: 4, Insightful

      But ultimatly, most users would probably enjoy the massive improvments in customer expierience that could be achieved using this information.

      When I go to the gas station, the attendant does not put a tracking device on the car that keeps track of everything I look at in the store and allows him to take note of whether I stop off for gas with one of his competitors.

      Here's the problem: companies are impersonal. So are websites. No amount of "tracking" will make a website seem like a conversation with anohter person. If you want my opinion, ask for it. Either way, I will be deleting cookies from your website every day.

    3. Re:Why not? by Zerth · · Score: 1

      However, WTF would he need to know I came back to his site later? WTF would he need to know that I visited his site several times over a period of a week and eventually purchased something?

      Knowing if you are the same person is the difference between saying "only 1 out of 3 people ever buy anything" and "People visit our site 3 times before buying something"

      It's the difference between showing you random crap and showing you products you might actually be interested in.

      First party cookies are useful to both you and the places you frequent. Confusing them with 3rd party tracking cookies just means you'll pay more than other customers, take longer to find what you want, and miss out on deals.

    4. Re:Why not? by Otto · · Score: 1

      Knowing if you are the same person is the difference between saying "only 1 out of 3 people ever buy anything" and "People visit our site 3 times before buying something"

      Why does he need a cookie to determine that information? Answer: He doesn't. He could base it on IPBlock for that matter. Dynamic IP problems are usually solved by considering it as a netblock instead of on an IP by IP basis. Yes, it fuzzs up the data a bit, but not enough to be unable to say "people visit 3 times before buying anything". I mean, that's a pretty fuzzy statement already.

      The point being that despite what he says, he doesn't need to set a cookie to get that infomation. He *does* need a cookie to correlate who I am with what I look at on his site. And I don't want him to have that info. Sorry, but no sale. Without him telling me why he's tracking my views of his site, I cannot know what he's doing. And even then, I'd have to trust what he tells me.

      In any case, cookies are being deleted regularly nowadays, so he'll have to stop being so lazy and actually track by IP, which is what he should have done in the first frickin' place instead of gathering way more data than he actually needed and thus invading the privacy of his customers.

      --
      - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
    5. Re:Why not? by ip_fired · · Score: 4, Informative

      Cookies don't track which sites you go to. A cookie has a domain that it actually is assigned to. When you visit that domain, the web browser sends that cookie to the server. If I go to amazon.com and they put a cookie on my system, then the only people who can look at it is amazon.com. They can't tell that I also went to overstock.com and looked at books. And overstock can't tell that I've been to amazon.

      The only time they can get this information is if a third party has an Ad, or some other content on both sites (which is what makes cookies from ad sites more dangerous).

      So really, when you go to the gas station, the attendant doesn't have to put a tracking device on your car. Just record your license plate (after all, isn't that all a GUID is?) Your car always has it's license plate, and so they can see who it is. Then they can track your usage at the gas station.

      Cookies can provide useful information to the site developer. You like visiting well designed websites right? Getting information that will help you streamline the site is a good reason to track those statistics.

      You are being too paranoid. Get adblock, only allow cookies to be set by the originating website and use a hosts file that blocks most ad sites and then you won't have to worry about it.

      --
      Don't count your messages before they ACK.
    6. Re:Why not? by Tony-A · · Score: 1

      just as any salesman who recognized a regular customer

      If that salesman is a single individual, different from all other salesman.

      If that salesman is a member of the Borg, and they all know what he knows and he knows what they all know.

      most users would probably enjoy the massive improvments in customer expierience

      Actually no. Too much of the same old same old, no matter where you go, no matter who you talk to. Impossible to make a fresh start or to try something different just to see if you like it.

    7. Re:Why not? by NickFortune · · Score: 4, Interesting
      I mean, I completly understand your love of privacy, and I believe that it is your right to keep that information to yourself if you want to. Excellent. That is all I ask.

      If they know their customers a little better, they can improve their business, just as any salesman who recognized a regular customer would.

      To the benefit of whom? I feel no incentive to assist in this process.

      But if you feel better always being a stranger then I dont see any problem with that. A stranger to whom? To doubleclick.net? Yes please! And let us not forget the resale value of aggregated marketing data. I think I'd like to remain a stranger to a lot of people online.

      But not everyone. I don't post as an AC for example. I think I can manage my own privacy thank you.

      But ultimatly, most users would probably enjoy the massive improvments in customer expierience that could be achieved using this information.

      "could" being the significant term. I have no confidence that this information would be utilised to improve my life. What they going to do? Give me targetted ads? Adverts that more closely match my interests? Only an adman thinks of that as a benefit.

      And I've yet to hear mention of any other

      --
      Don't let THEM immanentize the Eschaton!
    8. Re:Why not? by Otto · · Score: 3, Insightful

      Get adblock, only allow cookies to be set by the originating website and use a hosts file that blocks most ad sites and then you won't have to worry about it.

      Holy crap that's a lot of work. I simply changed my preferences to "delete cookies at shutdown" and then add sites I want to remember me on a site-by-site basis.

      Far, far simpler. Far, far more effective. When I find a new site and decide I want them to remember me, I simply add that new site to the whitelist. No hosts file slowdown (and no need to maintain the hosts file), no need to change any settings which don't work in the long run (what if I visit originating website directly somehow?), no need to use an adblocker (not for that purpose anyway). It's simple, it's low maintainance, it's more effective. What isn't there to like? So it screws up some poorly designed website's privacy-invading user-tracking statistical analysis. Tough shit to them then.

      --
      - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
    9. Re:Why not? by periol · · Score: 1

      Cookies can provide useful information to the site developer. You like visiting well designed websites right? Getting information that will help you streamline the site is a good reason to track those statistics.

      I'm going to keep posting this link, despite posting it in other places in this thread. I don't think I'm being paranoid in any way, shape, or form. Just realistic.

      And yes, I think you have your head in the sand.

      For the record, I develop and design websites (hopefully they're done well). If a login is required, I set session cookies. Otherwise, I don't use cookies. Ever. If you need to login to a site for security reasons, then you will have to login every time. Otherwise, security is being compromised.

      Yes, I realize not everyone does this. I wish they did.

    10. Re:Why not? by NickFortune · · Score: 2, Interesting
      First party cookies are useful to both you and the places you frequent. Confusing them with 3rd party tracking cookies just means you'll pay more than other customers, take longer to find what you want, and miss out on deals.

      Worse still, you'll grow a second head, become really unpopular with girls, and inevitable become sucked into a life of violent crime, culminating in an death row jail cell.

      Seriously, your argument could just as easily work the other way. "This one bought some expensive stuff off us last week - add 30% to all the prices. He can afford it. This one buys from us every week - no point in wasting discounts on him - save it for the ones we haven't hooked yet".

      It may be unreasonable, but I'd like to be charged the same price as everyone else, please.

      --
      Don't let THEM immanentize the Eschaton!
    11. Re:Why not? by QuestorTapes · · Score: 1

      > Do you shop more than once at the same store? gas station? cvs? etc?
      > What is the differnce between a cookie, and a clerk who recognizes your face?

      A clerk is a human being. In many if not most cases, the clerk is a human being capable of understanding the local language in that geographic region, is capable of basic reasoning skills, is capable of remembering what he is the customer requests him to (not just what his employer requests him to), and much more in the quest to provide service to the customer.

      A computer running a web site is normally not capable of doing any -one- of these things. If the clerk was deaf, stupid, and lacking in both short and long term memory, and only capable of remembering my purchases, browsing habits, and face, I'd consider him a -damn poor clerk-.

      I want a clerk who can not only remember that I bought Cotton Club plain seltzer water in 2-liter bottles, but that I also told him I prefer the lemon lime flavored, in the 1-liter bottles, and that I only purchased the 2-liter plain because they were out of what I really wanted.

      I can't tell the web site software that; it just keeps suggesting the 2-liter plain.

      I want a clerk that can not only remember that I bought a specific children's book, but that it isn't indicative of my buying habits, since it was a one time gift.

      I can't tell the web site software that; it just keeps suggesting more kiddie books.

      > the why is simple. If they know their customers a little better, they can improve their business,
      > just as any salesman who recognized a regular customer would.

      That's the logic; unfortunately it's wrong. As I mentioned above, the things they are doing, in -isolation from- other key elements of good service, make for a -damn poor clerk-.

      Without the ability to actually communicate in the vernacular on a non-trivial level with customers, web tracking -cannot- be the basis for understanding the customer and improving service.

    12. Re:Why not? by TCM · · Score: 4, Insightful

      Cookies don't track which sites you go to. A cookie has a domain that it actually is assigned to. When you visit that domain, the web browser sends that cookie to the server. If I go to amazon.com and they put a cookie on my system, then the only people who can look at it is amazon.com.

      Well, Sherlock, we're talking about the marketers like Doubleclick here. Doubleclick has banners on countless websites. Each banner's picture has the website it's displayed on encoded in the URL. Additionally, they set cookies from the domain doubleclick.net. Now what happens? Doubleclick can track you because each of their banners on all sites they have a banner on can read the cookie.

      --
      Of course it runs NetBSD. BTC: 1NT7QvbetmANwaMzhpVL6
    13. Re:Why not? by TCM · · Score: 1

      What is the differnce between a cookie, and a clerk who recognizes your face?

      The clerk's "data processing capabilities" are nothing compared to a global data-mining entity with massive computing power behind it. The clerk is unlikely to pass your buying habits on to his fellow clerks in the whole country. Nor will he be able to do the same recognition for hundreds of thousands of individuals.

      --
      Of course it runs NetBSD. BTC: 1NT7QvbetmANwaMzhpVL6
    14. Re:Why not? by Zerth · · Score: 1

      >Seriously, your argument could just as easily work the other way. "This one bought some expensive stuff off us last week - add 30% to all the
      > prices. He can afford it. This one buys from us every week - no point in wasting discounts on him - save it for the ones we haven't hooked yet".

      Many places probably does do that, but it is rather short-sighted. The minute somebody uses another computer and sees a cheaper price, they'll probably never shop with you again.

      >It may be unreasonable, but I'd like to be charged the same price as everyone else, please.

      Totally reasonable. And if you walk into my bookstore, I'll give you the same price as any random person. But if I know you like sci-fi, I'd be sure to mention that if you don't mind waiting to buy that book, next week we have a 20% off sale on sci-fi if we haven't put up the signs yet.

      And if you come in with a book and say you'd like to return it, but you don't have a receipt, I'll give you the same store credit I give everyone else. But if I remember selling it to you, I'll give you a refund if you don't want anything else right now.

      When I go get lunch from the local sandwich shop, I wait in line like everyone else, but I get my food faster because the staff knows me and doesn't have to ask what I want. They don't treat the other customers worse, they just don't know the other customers' habits.

    15. Re:Why not? by AJWM · · Score: 1

      What isn't there to like?

      Well, the fact that it doesn't work, for one.

      If you only delete cookies at shutdown, then for as long as you have your browser open (sometimes days, for me) ad sites can track you from one site to another (assuming they have ads). If you really don't want to be tracked, you need to block the cookie and/or ad host.

      (And be aware that if the ad server and content server sites agree, the ad site can correlate that with any personal info you've provided to the content site by way of an ID in the ad URL. Subject to the content site's privacy policy, yadda, yadda, yadda.)

      --
      -- Alastair
    16. Re:Why not? by Anonymous Coward · · Score: 0

      Cookies don't track which sites you go to.

      Myth. I didn't read much past that but examine this: I set a cookie in a window to a 3rd party site, they log your IP with the cookie and send it to one of the slime marketing companies. They in turn send out a list of sites that IP has recently visited that has their monitoring on the pages you visit. Trivial and done all the time.

      I don't use IE, and I do dump my cookies for each session.

    17. Re:Why not? by Otto · · Score: 1

      Well, the fact that it doesn't work, for one.
      If you only delete cookies at shutdown, then for as long as you have your browser open (sometimes days, for me)...


      Well, I don't do that. I generally close programs when I'm not using them. Although you could have it set to delete your cookies every hour, or whatever fits how you use your computer. The point isn't in the precise details, it's in the throwing of the monkey wrench into their tracking system.

      --
      - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
    18. Re:Why not? by ip_fired · · Score: 1
      Gee, let me repeat what I said in my post:
      • only allow cookies to be set by the originating website
      • hosts file that blocks most ad sites
      • Get adblock
      I believe that answers your concerns. Don't accept cookies from ad sites. You got a +4 insightful for not reading the post you were responding to???
      --
      Don't count your messages before they ACK.
    19. Re:Why not? by dillon_rinker · · Score: 1

      What is the differnce between a cookie, and a clerk who recognizes your face?

      If the clerk recognizes my face, out of hundreds of customers, then I'm sure I recognize his face, out of a dozen or so clerks. We are on the same footing; in terms of power, we are peers. With cookies, it is 100% different. I don't know what's in the cookies. I don't know how it's used. I don't know who gets the information. In terms of power, I am not a peer. In fact, I am not even a serf, not even a slave, not even chattel. I am a piece of ground to be plowed or burned or planted; I am incapable not only of protesting but of perceiving what is done to me.

      This post hath waxed metaphorical....but hopefully you get my point nonetheless.

    20. Re:Why not? by Quikah · · Score: 1

      And what happens when they do correlate everything? What exactly are you trying to prevent from happening?

      --
      Q.
    21. Re:Why not? by TCM · · Score: 2, Funny

      You got a +4 insightful for not reading the post you were responding to???

      You must be new here. :)

      --
      Of course it runs NetBSD. BTC: 1NT7QvbetmANwaMzhpVL6
    22. Re:Why not? by Otto · · Score: 2, Insightful

      And what happens when they do correlate everything? What exactly are you trying to prevent from happening?

      Wrong question. The correct question is what do I have to gain by them amassing this info on me and my activities?

      I can't think of anything that would be to my benefit, which is more than enough reason to put a stop to it, IMO.

      --
      - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
    23. Re:Why not? by Quikah · · Score: 1
      To the benefit of whom? I feel no incentive to assist in this process.
      It is for the benefit of the company and its customers. By being able to learn what its customers want they will be able to create products which better fulfill their needs. Making said company more money and said customer more happy.
      What they going to do? Give me targetted ads? Adverts that more closely match my interests? Only an adman thinks of that as a benefit.
      Yes, god forbid I get an ad telling me about something that might interest me.
      --
      Q.
    24. Re:Why not? by NickFortune · · Score: 1
      Many places probably does do that, but it is rather short-sighted. The minute somebody uses another computer and sees a cheaper price, they'll probably never shop with you again.

      Alas short-termism seems to be modern disease. Grab what you can and get out. After all, if revenues start dropping, they can always change the domain and the branding and start again, right?

      It's a question of trust, and this is an area where trust has been abused.

      And if you walk into my bookstore, I'll give you the same price as any random person. But if I know you like sci-fi, I'd be sure to mention that if you don't mind waiting to buy that book, next week we have a 20% off sale on sci-fi if we haven't put up the signs yet.

      But if you haven't put up your signs, you didn't update your website, so you can't tell me anyway. unless you're proposing to spam me at a later date - in which case I don't want your cookies, thank you, or anything else you might have.

      And if you come in with a book and say you'd like to return it, but you don't have a receipt, I'll give you the same store credit I give everyone else. But if I remember selling it to you, I'll give you a refund if you don't want anything else right now.

      Yes, yes, yes. But this is the internet. I have a copy of the sales details and so should you. And I have a record of the credit card transaction. And so should you. So an honest trader is going to give me the refund anyway, so I don't need your cookie. Do I?

      When I go get lunch from the local sandwich shop, I wait in line like everyone else, but I get my food faster because the staff knows me and doesn't have to ask what I want.

      What, like you always have a tuna-and-sweetcorn bap?

      They don't treat the other customers worse, they just don't know the other customers' habits.

      What do they do? Make it up the night before? Yuck!

      Seriously, this service could be offered with a subscription. which has the advantage that I know up front what's happening.

      --
      Don't let THEM immanentize the Eschaton!
    25. Re:Why not? by dillon_rinker · · Score: 2, Insightful

      Cookies don't track which sites you go to.
      Right. And guns don't kill people.

      The only time they can get this information is if a third party has an Ad, or some other content on both sites
      Exactly. And the only time a gun is dangerous is when it is loaded and pointed at you.

      Your car always has it's license plate, and so they can see who it is.
      No one tracks license plates. The benefits of tracking them are far outweighed by the costs.

      You like visiting well designed websites right?
      You like candy, don't you, little girl? What I am getting (a well-designed web site) is far outweighed by what I am giving up (all my privacy). Besides, what good is a web designer who can't design a web site without my coerced assistance?

      You are being too paranoid. ...said the ad agency's shill.

    26. Re:Why not? by Anonymous Coward · · Score: 0
    27. Re:Why not? by TCM · · Score: 1

      Yeah, of course I was talking about the fictional scenario where you aren't blocking them in the first place.

      --
      Of course it runs NetBSD. BTC: 1NT7QvbetmANwaMzhpVL6
    28. Re:Why not? by NickFortune · · Score: 1
      By being able to learn what its customers want they will be able to create products which better fulfill their needs.

      Post a survey page. That's what people did the days before cookies.

      Incidentally, what create what products? Most of the stores I visit are box shifters for other companies. Most of the sites I visit aren't even stores.

      Yes, god forbid I get an ad telling me about something that might interest me.

      Gosh yes. I just live for the opportunity to give you all the information you need to manipulate me more efficiently into buying more junk I don't need at every possible opportunity. Really, that's all I've ever wanted from a web site is better adverts. Hell, let's lose the content altogether and just have ads.

      Makes you wonder why no one's written software to stop those nasty web pages covering all those nice popunder adverts, doesn't it?

      --
      Don't let THEM immanentize the Eschaton!
    29. Re:Why not? by Anonymous Coward · · Score: 0

      They in turn send out a list of sites that IP has recently visited that has their monitoring on the pages you visit.

      This works only for very narrow time windows. My DSL modem uses DHCP, so everytime it re-connects, odds are good I get a new IP address. I think it also gets a new address daily on its own.

      So, in a window of a few hours, IP-based data might be accurate, but past 24 hours it is practically useless, except for people with static IPs (DHCP and NAT are actually a couple of the saving graces of IPv4).

    30. Re:Why not? by sfm · · Score: 1

      License plate numbers are regularly tracked
      these days camera radar, automated roadside
      smog checks, and particularly annoying, Airport
      parking lots. Just because it is happening,
      doesn't mean I like it. When the concern
      grows large enough, people change their actions.
      (i.e. Avoiding cameras on top of stop lights
      or NOT parking at airports).

      The same thoughts apply here. Cookies are a
      useful tool, but they can also easily be abused.
      If people feel their cookies are more of a
      detriment than benefit, they get deleted on
      a regular basis.

    31. Re:Why not? by walt-sjc · · Score: 1

      Don't forget the non-marketers - the "web metrics" companies. I'm just assuming that everyone has had doubleclick in their blacklists for years already. There are Huge numbers of these metrics sites, and many sites use multiple services. Adblock does a wonderful job of nuking all the javascript and transparent pixel images from these parasites.

    32. Re:Why not? by macshit · · Score: 1

      Many places probably does do that, but it is rather short-sighted. The minute somebody uses another computer and sees a cheaper price, they'll probably never shop with you again.

      Indeed, it's just as likely they'll do the opposite -- retailers really like repeat customers.

      In the non-internet world it certainly happens; there are shops I've patronized where after I had bought a number of (relatively expensive) items there, they started giving me great discounts without prompting. Certainly it's possible that a stranger could bargain for a while and get the same price (their margin is the same after all), but it seems clear they like repeat customers and will reward you for being one.

      Of course in the non-internet case, it's some salesguy saying to himself "hey I remember that dude, he's a good customer; I'll give him a bit of a break". Perhaps software -- who's rules are more firmly dictated by stingier management -- might be less generous. Still, at a basic level, the incentives seem the same, so I'd think they'd tend to yield similar results in the end.

      --
      We live, as we dream -- alone....
    33. Re:Why not? by Zerth · · Score: 1

      >Grab what you can and get out. After all, if
      >revenues start dropping, they can always change
      >the domain and the branding and start again,
      >right?
      That would only work if positive reputation is unnecessary in a particular business and repeat business isn't valued. Which isn't to say there isn't such happening, e.g. Claria is still in business, despite the fact that all the paid links in google are "Remove Claria Spyware Here" and nearly everyone calls them "the spyware company formerly known as Gator".

      >It's a question of trust, and this is an area
      >where trust has been abused.
      I do block all 3rd party cookies, except a few in my whitelist. But I have yet to deal with a company that used 1st party cookies abusively. If they have any info they could abuse, they got it from me, which I can't help until somebody invents anonymous digital cash and the postal service lets us call PO boxes "Suite ####" again.

      I worry about first party cookies significantly less than I worry about using a credit card at a restaurant. After all, the waiter has more than enough time to copy your CC#, the security code on the back, your signature, /and/ the magstripe.

      Or do you insist on them processing the transaction in front of you?

      >But if you haven't put up your signs, you didn't update your website, so you can't tell me anyway. unless
      > you're proposing to spam me at a later date - in which case I don't want your cookies, thank you, or anything
      > else you might have.

      No, we spam you at an earlier date:) If you are a regular customer(you have an account with us, have given us a way to contact you, and you asked us to do so(that would be at least double, if not triple opt-in)) we tell you about our promotions at least a week before it happens, but we don't put up signange until the promo is active.

      >Yes, yes, yes. But this is the internet. I have a copy of the sales details and so should you. And I have a record
      >of the credit card transaction. And so should you. So an honest trader is going to give me the
      > refund anyway, so I don't need your cookie. Do I?

      If you jotted down your transaction ID, nope.

      But if you lost the # and didn't give an email for the shipping confirmation(which you probably wouldn't) and you don't have an account(which you sound like you rather wouldn't) and you don't have the cookie that would let us recognize you without an account(which you've made abundantly clear you wouldn't), you'd have to call in and be subjected to our hold music while someone strolls over to the CC transaction server, cause it isn't on the network.

      >What, like you always have a tuna-and-sweetcorn bap?

      When I go to that particular shop, I always get the exact same order(decent chicken sandwich with a side of the best yogurt I've ever had) since I don't care for anything else they serve. I've been going there about every other day for a few years now.

      >What do they do? Make it up the night before? Yuck!
      Some of the ingredients, yes. Which is partly why I don't care for the other stuff they make:)

    34. Re:Why not? by Lehk228 · · Score: 1

      actually doubleclick is on my hosts file shit list so no they can't track me, but they can go fuck themselves.

      --
      Snowden and Manning are heroes.
    35. Re:Why not? by munpfazy · · Score: 1

      >Do you shop more than once at the same store? gas
      >station? cvs? etc? What is the differnce between a
      >cookie, and a clerk who recognizes your face?

      The difference is that when, six years from now, the local sheriff's buddy buys the gas station and asks the new clerk for a list of names and addresses for "every commie bastard who's browsed through those leftist magazines the old owner used to sell," he's unlikely to find his way to my house.

      There's a world of difference between a shopkeeper knowing your face and occasionally noticing what you do in a store, and a system that records everything you look at along with all your personal information and keeps it forever.

      If every time I walked into the local gas station a guy followed me around with clipboard that had my name and address on it, taking notes, then filed the documents in a huge stack of filing cabinets when I left, I'd be concerned about that too.

      Even for those who aren't paranoid, there are reasons you might not want anyone who is ever associated with an online retailer to know about every page you've read:

      "So, John, I'm glad to hear that you're interested in working for us here at bigonlinebookstore.com. I've got to say, I was really impressed by your resume. There's just one thing - looking over the logs for littleboughtoutbookstore.com, we've noticed that you read reviews for a surprising number of clown-porn magazines back in the mid nineties. . ."

      Sure, the chances that you will be personally the victim of a bad cookie experience may may be small. But somewhere, someone is going to get busted for something that you and I don't find objectionable because a cookie-based database fell into the wrong hands. Laws change, and bad people get privileged positions in companies. Only by refusing to cooperate in mass with mechanisms that unnecessarily strip us of our privacy can we protect that person, whoever it may be.

      And while we're on the topic - what on earth are these consumer experience improvements the ad-men are always going on about? Without cookies, I get to browse through an online store. With cookies, I get to browse through the same online store, but it mentions my name at the top of every page. That's either harmless or creepy, but it sure isn't useful to anyone but a marketer.

    36. Re:Why not? by Anonymous Coward · · Score: 0

      You dumb fucks. It's Google you should be worried about. They already have much more incriminating stuff that they they log, they *do* track where you go, and they have ads on probably more sites than DoubleClick now.

      But sure, they won't be evil. Nosiree. No self-made billionaire would.

    37. Re:Why not? by NickFortune · · Score: 1
      Which isn't to say there isn't such happening, e.g. Claria is still in business, despite the fact that all the paid links in google are "Remove Claria Spyware Here" and nearly everyone calls them "the spyware company formerly known as Gator".

      Heh, yeah.

      I worry about first party cookies significantly less than I worry about using a credit card at a restaurant. After all, the waiter has more than enough time to copy your CC#, the security code on the back, your signature, /and/ the magstripe.

      True. But you can disclaim the transaction. And if enough people do it the resauranteur ends up in court from the credit card people for fraud which is the main reason the system works.

      On the other hand we have no way to monitor what happens with our tracking data. And given that I don't want it to exist in the first place...

      If you jotted down your transaction ID, nope.

      Hmmm... I think I'm happy to assume responsibility for keeping my transaction ids, just as I assume responsibiity for keeping my receipts.

      That suggests another difference between your bricks-and-mortar shop and an internet outlet. The internet site has some failure modes that a human being doesn't have.

      For instance, if a meatspace shopkeeper sells the business, he doesn't sit down with the new owner and describe every customer from memory: "About six-two, big coat and goggly eyes and a really long wooly scarf. Likes S/F". But if a cyberstore sells up, they pass on the data as part of the equity. Equally, the human shopkeeper doesn't get his brain hacked or stolen or retrieved from a dumpster after an upgrade. And with all those triple opt-in email addresses too...

      >What do they do? Make it up the night before? Yuck!
      Some of the ingredients, yes. Which is partly why I don't care for the other stuff they make:)

      heheh. fair enough then :D

      --
      Don't let THEM immanentize the Eschaton!
    38. Re:Why not? by Anonymous Coward · · Score: 0

      > No one tracks license plates.

      Really ? What are those plate scanning cameras doing in the UK, then ?

    39. Re:Why not? by Otto · · Score: 1

      This works only for very narrow time windows. My DSL modem uses DHCP, so everytime it re-connects, odds are good I get a new IP address. I think it also gets a new address daily on its own.

      For DSL where you connect and disconnect (possibly using PPPoE), you are correct. For Cable Modem users, or even for users who always leave their DSL connected (perhaps by using a home "router" which keeps the connection alive), their IP rarely changes, even though it is using DHCP and so forth.

      Example: My DHCP lease time is 48 hours. My router, which obeys the DHCP standard, gets that IP then waits for 24 hours. Then it renews. I get the same IP and my time is extended for another 24 hours. This happens, basically, forever.

      To get a new IP I have to:
      a) Turn off my router and wait for 24-48 hours + long enough for somebody else to claim my old IP, or
      b) Manually Release my IP, then wait for somebody else to claim it.

      Otherwise, I get the IP back on a Renew.

      A large number of cable modem users are basically along these lines. There's no dialing, there's no real period of time where I'm not connected. This is generally the way things are headed, so even with "dynamic" IP's, it's reasonable to assume that the IP doesn't change a lot for many users. In the days of dial-up, it was different. DSL is still kinda like dialup in that sense.

      --
      - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
    40. Re:Why not? by Miros · · Score: 1

      Not providing information isnt a monkey wrench. If you ignore them, they'll ignore you. But I really appreciate you sharing your malicious intent, not that it surprises me given your tone.

    41. Re:Why not? by blueup · · Score: 1

      When you go to the gas station, the clerk may notice you going up and down the aisles over and over again, and ask if there is something he can help you find.

      Companies and websites ARE impersonal, but as tech improves and we approach the expert system/AI holy grail, websites may be able to read your "body language"/click stream and help you get what you want, presented in the way most appealing to you.

      --
      -- The above may have once been believed by me, but any truth or application you find is your own problem.
    42. Re:Why not? by AJWM · · Score: 1

      Well, if you really want to monkey wrench it, don't delete your cookies file but go in with an editor and change some of the strings. Thow in some really long ones or some odd characters if you want to try breaking the parser.

      Odds are the tracking system will probably just reject it as garbage rather than actually break or link your info to somebody else, but you never know.

      --
      -- Alastair
    43. Re:Why not? by Otto · · Score: 1

      The idea is not to break their site, although that can be a fun way to spend an afternoon.

      The idea is to use their site without allowing them to track you on any kind of meaningful basis. For that, this simple measure is effective.

      --
      - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
    44. Re:Why not? by Quikah · · Score: 1

      Yeah, it would be great to have an ad free web. Too bad no one can afford to do that. Bandwidth costs money. Developing webpages cost money. Advertisements are one way to pay for these costs.

      --
      Q.
    45. Re:Why not? by NickFortune · · Score: 1
      Excuse me, where did I say "ad free web"?

      I would be quite hapy with advertising that respects my time and property. No movement, no noise, no popups, nothing I find annoying or offensive.

      But if that's too much to ask, and at the moment it seems that it is, then I'll make my personal web ad free until the advertisers get a clue.

      --
      Don't let THEM immanentize the Eschaton!
    46. Re:Why not? by Anonymous Coward · · Score: 0

      Doubleclick can track you because each of their banners on all sites they have a banner on can read the cookie.

      That's why I disable all third party cookies.

    47. Re:Why not? by Quikah · · Score: 1
      I said it would be good to get ads which I might actually be interested in, you replied with:
      Gosh yes. I just live for the opportunity to give you all the information you need to manipulate me more efficiently into buying more junk I don't need at every possible opportunity. Really, that's all I've ever wanted from a web site is better adverts. Hell, let's lose the content altogether and just have ads.
      This says to me you don't want ads at all.
      --
      Q.
    48. Re:Why not? by NickFortune · · Score: 1
      This says to me you don't want ads at all.

      You were sarcastic, I returned the compliment.

      I'm not mad keen on ads. Very few are. Internet ads tend to be needlessly intrusive and distracting. I see no reason to help someone craft ads I find even harder to ignore.

      So what's your point?

      --
      Don't let THEM immanentize the Eschaton!
    49. Re:Why not? by mikefe · · Score: 1

      I love how you use the same arguments for cookie control that are used for gun control.

      Just like there are legitimate uses for guns, there are also useful to you (the site visitor) and them (the site creators). It allows them to make their site better. Just block the third party cookies (and set a 60 day time limit on the rest) to get rid of the bad cookies.

      I wonder if I'll have any karma left after saying I don't support gun control...

      --
      There: Something at a specific location.
      Their: Owned by someone.
      Please make sure your english compiles.
    50. Re:Why not? by Quikah · · Score: 1

      I already gave my point. It would be nice if the ads I did see were for something that actually interested me.

      --
      Q.
    51. Re:Why not? by NickFortune · · Score: 1
      Alas, irrelevance is by far the least of my complaints with the ad industry.

      And you know what? If I want to find a product to do something, I;'ll google for it.

      Personalised or no, most ads are an unwelcome distraction from my daily online business. The ad industry has a lot of other problems to address before I worry too much about poorly targeted advertising.

      --
      Don't let THEM immanentize the Eschaton!
  42. Tony Soprano said it best. by base3 · · Score: 2, Funny

    "That cookie shit makes me nervous."

    --
    One CPU cycle wasted on digital restrictions management is ONE TOO MANY.
  43. Almost a dupe by Anonymous Coward · · Score: 0
  44. it begins... by SolusSD · · Score: 1

    great... I hope no marketing firms read this thread.

  45. I backup my cookies by Anonymous Coward · · Score: 0

    I never understood the paranoia surrounding cookies.

    Without cookies, browsing the web would be slow frustrating. I dont want to enter my pw everytime i read slashdot for example. So it's saved, and has been since 1998 or 99.

    Everytime I backup files, my cookies are also backed up. I have cookies from as early as 1997.

    Occasionally i'll go through them and delete the ones i no longer need or the ones that belong to sites that no longer exist. I'll also delete ad server tracking cookies (although i rarely have any since i filter all web sites and strip them of ads), but to delete all your cookies once a month seems insane.

    Then again, some people format their computers once a year or so and could care less about starting over, whereas I have obsessive compulsive disorder and cant stand change so I take screenshots my desktop and different menus and printouts of directory listings, etc so that whenever i do start over i can get it looking EXACTLY the same as it did before, even if that means creating empty directories just to keep the tree looking the same

    ok maybe im crazy so my points dont matter to most people, but dammit cookies arent evil!

  46. "Marketers Worried As Cookies Lose Effectiveness" by pyst-off · · Score: 0

    Earlier this week, I read Nabisco is having the same problem with entire batches of Oreos.

  47. Re:The other side of things. The Reason by Nom+du+Keyboard · · Score: 1
    Does that still make me evil?

    Yes.

    The reason for yes is because you are advocating sane uses for cookies. The marketers complaining about the loss of their cookies aren't complaining because they can't tweak their site as easily. They're complaining because they feel -- rightly or wrongly -- that they are more effective when they can track customers regardless of how the customers themselves feel about it!

    The customers are voting with their feet, or in this case their Cookie Cutters. 40% are already so annoyed at how the Internet treats them that they delete their cookies at least once a month in the hope that this will reduce the insulting behavior at least a bit. And if 40% are actually doing it, you can bet that more would if they knew effectively how to do so.

    So yes you are evil for advocating the keeping of a tool that is being misused to annoy many customers while seeking out gulible ones to take advantage of. It has got to be an low-numbered rule of business that you don't succeed by annoying your customers so much that they attempt to change their behavior to avoid further such annoyances.

    You got your answer.

    --
    "It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
  48. Self-contradictory by Goalie_Ca · · Score: 1

    Almost 40% of surfers delete them on a monthly basis, says Jupiter Research -- a fact one marketers attributes to incorrect associations with spyware and privacy invasion.

    We really want to track where you've been but IT'S not spyware or privacy invasion. Really!

    --

    ----
    Go canucks, habs, and sens!
  49. Cookies have their place... by pj-allmod · · Score: 2, Informative

    ...just ask sessions. I think there needs to be a term defining the difference between reality and the responses on Slashdot. Of course computer nerds are going to be up in arms about using cookies to track info, the rest of the planet, however, is wondering why a computer site has an article referring to baked goods.

  50. Why do they need to persist until 2035? by Anonymous Coward · · Score: 1, Insightful

    Some cookies are reasonable to accept because they actually do help keep track of client-side status during a website visit. Or even repeated visits. A cookie which persists more than a few months or even a few weeks probably outlives any utility as a status tool. Why, then, do websites continue to try to get me to accept cookies which have five or ten or even thiry year lifespans? I automatically reject cookies which are set to live longer than I probably will.

  51. get your hands out of MY cookie jar! by Anonymous Coward · · Score: 0

    Lately, however, the effectiveness of cookies is being threatened, and experts say that could have a damaging effect on on-line marketing in general.

    No, the effectiveness of cookies is being threatened by your using them for a purpose they were never intended -- stalking me. I won't have it.

    They're not YOUR cookies, they're MINE. The ability to leave a "tiny text file" on my computer was put there for MY benefit, not yours.

    Cookies hold passwords for some sites. My cookies holding my passwords. Others hold information about how I want the page displayed.

    Using my cookies to sleazily stalk me for the purpose of marketing isn't why I've enabled them.

    "The more people that delete cookies, and the more frequently that cookies are deleted, the more it will adversely affect campaign performance," echoes Jay Aber, president of ad network 24/7 Canada Inc.

    So tell me, Jay, why should I give a flying fuck? Why should I not jump for joy at this news?


    Mr. Aber notes that publishers and advertisers primarily use cookies to accurately measure a campaign's reach and effectiveness, limit the number of times a consumer sees a specific ad, and deliver "targeted" advertising to users based on their surfing habits and preferences.


    I don't want to be measured. As to "limiting the number of times a consumer sees a specific ad," that's just laughable. How many times have I seen the mortgage dacghsun(sp)?


    According to Mr. Peterson, the increase in cookie deletion can largely be attributed to consumers associating what he calls "harmless little text files" with spyware and the invasion of their privacy on-line.


    So he has one brain cell left. Look, Peterson, we don't WANT to be tracked, targeted, or stalked for marketing "their surfing habits and preferences."

    Get the hell OUT of my computer.

    "...places Macromedia Flash MX files on users' computers that can't be as easily deleted"

    That's just plain evil. Burn in hell, scum.
    1. Re:get your hands out of MY cookie jar! by ettlz · · Score: 1
      ...we don't WANT to be tracked, targeted, or stalked...

      Or, for that matter, pushed, filed, stamped, indexed, briefed, debriefed... or numbered.

    2. Re:get your hands out of MY cookie jar! by Anonymous Coward · · Score: 0

      Of course not number six

    3. Re:get your hands out of MY cookie jar! by Anonymous Coward · · Score: 0
      pushed, filed, stamped, indexed, briefed, debriefed...

      No, Wait! I DO want to be debriefed.

    4. Re:get your hands out of MY cookie jar! by colinrichardday · · Score: 1

      That depends, I'd let Liz Hurley debrief me, but not Starr Jones.

  52. Proportionality, anyone? by Anonymous Coward · · Score: 0

    Amount of porn on the internet ~ People downloading it ~ Amount of cookies being deleted on a monthly basis

  53. Too Bad by kenp2002 · · Score: 4, Insightful

    I hear many people complaining about EVIL marketers. Most marketing companies are rather decent people trying to find you the customer who wants their product. A VERY small % of marketing companies are shady info-whoring bastards. Targetted marking is a rather nice thing as far as I am concerned. When offered to provide interests, and the resulting ads, I find myself visiting the link. WHAT I HATE is misdirected market, you know assholes that call you about new siding on your house when you live in an apartment, or my favorite (being a married old fart) getting ads for tapons and crap like that (because the wife occassionally does some surfing under my ID).

    It's too bad a small group, as usual, ruins it for the majority.

    --
    -=[ Who Is John Galt? ]=-
    1. Re:Too Bad by sobachatina · · Score: 1
      I am annoyed with agressive marketing of any sort. I almost never see any ads anymore. I throw away paper-junk mail without reading it, I use my tivo to kindly strip out tv ads, firefox blocks 99.9% of web ads for me, and I can easily enough ignore the billboards I pass on the way to work.

      When I've decided that there is a particular product that I need I will do the research and compare different competitors. Admittedly doing this I read content that is designed to sell the product but anything ad-like won't impress me. I look for more technical descriptions.

      I don't know how most people operate on the web (I assume most don't hate all ads like I do) but cookies don't fit the way I intend to shop.

  54. too long expiration dates by SuperBanana · · Score: 1
    What pisses me off the most about cookies is that they accumulate. Why?

    Take a look in your cookies pref page / file. Look at the expiration dates. I've found a huge percentage of sites, especially advertisers, use a date at least 10 years in the future.

    I'm unlikely to be using the same computer in 3-4 years, much less 10. Some sites even go for "2040". WTF? What's the point? If I don't visit your site within 6 months, I'm unlikely to gripe too much about having to reenter a username/password...so why are you making my system store a cookie for you for a couple decades?

    1. Re:too long expiration dates by NancyAndAnya · · Score: 1

      This is very true, and truly annoying. If you haven't captured a customer as a customer within 3 months, how likely do you think it is that you'll ever care about the cookie they left on their computer which is now sitting under 40 feet of refuse-pile-turned-golf-course? Unfortunately, this has far less to do with evil marketers, and far more to do with lack of forethought. "Don't be so quick to attribute to malice what can be attributed to idiocy!" (or just plain not thinking about things up front)

  55. Thought this sounded familiar by smooth+wombat · · Score: 1
    As soon as I saw the headline something jogged my memory. Sure enough, it was a story that was rejected in March which had almost the same information and which I've had posted in my Journal since then.

    My favorite quote from the original story (and probably the same exact study) was from Eric Peterson of Jupiter Research:

    "If consumers adopted a friendlier attitude toward cookies, the Internet would be a better place overall."

    --
    We will bankrupt ourselves in the vain search for absolute security. -- Dwight D. Eisenhower
  56. Re:Tracking customer behavior by Migraineman · · Score: 4

    I went to a clothing store a few years ago to buy a present for the wife. I handed the cashier cash for the items, then had the following conversation -

    Cashier: May I have your phone number?
    Me: No.
    Cashier: It's only for customer satisfaction purposes ...
    Me: What part of "no" was ambiguous?
    Cashier: We need your phone number to improve customer service ...
    Me: Get your manager over here right now so I can explain why you're losing this sale, and all future sales ...
    Cashier: {types in store phone number}

    I get amazingly cheesed when businesses fail to respect my privacy (whether I have a "right" to privacy is a whole separate rant.)

  57. Spyware by ACNiel · · Score: 1

    The fact that they can tell how many are being deleted, and state that they are for tracking pretty much indicates that they are not incorrectly associated with spyware, doesn't it?

    To me that sort of defines spyware. It might be low tech, there might be better out there, but they are spying on us.

  58. don't you do this too? by supernova87a · · Score: 1

    I set my Firefox to manually ask to approve and deny cookie settings for every site I visit. (not each individual cookie, but the cookie policy for the site -- accept, reject, or temporary) Why should I let some random site set a cookie if I only want one-time information from it?

    Sites that have proved their value to me will be allowed cookies -- others that I derive no benefit from cookies I deny right off, and may get a chance if I want later.

    I realize I'm probably a more control-oriented user/compulsive type, but this is how I like it. Sites that bother me most are the ones that redirect you to other domain names and hide the relevant cookie information from you when you need to decide whether or not to change the permissions. And sites that just say "turn on all cookies" for them to work. Look, I don't want to accept *all* cookies. Just tell me which domains to turn on to make things work for your particular site...

    1. Re:don't you do this too? by mr_flea · · Score: 1

      After going through all the cookies I had in firefox and seeing how many were junk cookies (totally useless to me, and billions of copies of them) I set firefox to ask me to allow/deny/temporarily allow each cookie from each site, you would be surprised about how many sites store millions of useless cookies with information that either isn't needed or should be in their database, not in a cookie. I don't mind if they send a single session ID cookie, or maybe 2 or 3 general user information cookies, but when they start sending 10 just because I visited one page of their site, that's getting a little excessive. And about the ad-targetting mentioned in the article, haven't they heard of returning random ads?

  59. Be Very Scared of IPv6 by Nom+du+Keyboard · · Score: 2, Interesting
    If you think this is bad, then you should plan on being very scared of IPv6 since that will have the ability to give every device a permanent non-NATted IP address that will uniquely identify you. No need for cookies on your machine. Just a central site where everyone in the sharing of information pool can go to see what user 111.111.111.111.111.111.111.111.111.111.111.111.11 1.111.111.111 has done recently, and what we should serve him up next.

    And depending on how they're assigned, they may well know your actual address as well, just from the number.

    --
    "It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
    1. Re:Be Very Scared of IPv6 by sleepingsquirrel · · Score: 1
      If you think this is bad, then you should plan on being very scared of IPv6 since that will have the ability to give every device a permanent non-NATted IP address that will uniquely identify you.
      Whew! Good thing we're not going to have to deal with the IPv6 mess for at least another 20 years.
    2. Re:Be Very Scared of IPv6 by farnz · · Score: 1

      And if this scares you, go looking at RFC 3041. In short, your machine can change its IP address as and when it feels like it, so that tracking by IP is as helpful as it is in IPv4 days.

  60. Sorry to say it.. by EvilStein · · Score: 1

    but I really don't give a flying FUCK what marketers think or how skipping cookies and advertising is "hurting" them.

    I don't want advertising. I don't want to be marketed to. Leave me the FUCK alone.

    Come to think of it, I'm not sorry to say it. We've put up with invasive advertising & tracking for "marketing purposes to increase our click-through ROI" crap for way too long.

    1. Re:Sorry to say it.. by GigsVT · · Score: 1

      Leave me the FUCK alone.

      The best way to be left alone is to get to a remote location on a vacation island.

      If you will just step right this way you can get a free gift certificate after a short presentation on this valuable timeshare offer.

      --
      I've had enough abrasive sigs. Kittens are cute and fuzzy.
  61. They brought it upon themselves by It+doesn't+come+easy · · Score: 1

    As I am sure most of you will agree, people are learning to delete their cookies because most of us don't want to be tracked everywhere we go (in the real world this is called stalking). If the advertizers had policed themselves and did reasonable things with cookies, it wouldn't have become a problem. However, a few bad apples decided to do all sorts of things that any reasonable person would find offensive, and since Windows has a pitiful mechanism for managing cookies (by design I am sure) the quick fix is to simply delete them.

    So quit bitching and change your ways, cause we aren't going to take it anymore.

    --
    The NSA: The only part of the US government that actually listens.
  62. Marketers have only themselves to blame by phillymjs · · Score: 5, Insightful

    They abused phone calls, and that brought about the national Do Not Call list.
    They abused TV commercials, and that brought about "commercial skip" VCRs and TiVo.
    They abused pop-ups, and that brought about pop-up blockers.
    They abused Flash to make more attention-getting (read: obnoxious) banner ads, and that brought about Flashblock.
    They abused cookies, now people obsessively delete them if they allow them to be created at all.

    Am I the only one who sees a pattern here?

    ~Philly

    1. Re:Marketers have only themselves to blame by It+doesn't+come+easy · · Score: 1

      Absolutely right. However, it seems they still don't get it...

      The [Persistent Identification Element (PIE)] technology, which is already being used by UV clients, both restores original cookies and places Macromedia Flash MX files on users' computers that can't be as easily deleted.

      The war continues...

      --
      The NSA: The only part of the US government that actually listens.
    2. Re:Marketers have only themselves to blame by colinrichardday · · Score: 1

      And how do they stop

      find . -name "*.swf" | xargs rm -f

      ?

    3. Re:Marketers have only themselves to blame by Anonymous Coward · · Score: 0

      Yes, not a single pair of those are in order of occurance.

  63. 3rd party cookies by Avohir · · Score: 5, Informative

    I keep 3rd party cookies blocked... that keeps everything nice and clean.

    For the layman, the way these tracking cookies work is when you're visiting site A, site A has a banner from site Z. If you have 3rd party cookies enabled, not only can site A set a cookie to your harddrive, so can site Z. Now, you go to site B which also uses site Z's ads... and site Z can see you were also at site A. Block 3rd party cookies however, and you cant get a cookie from site Z unless you actually VISIT site Z.

    Disabling 3rd party cookies lets you keep their useful functions (login information at ebay, etc) and restrict the illegitimate ones (tracking my useage).

    Mike Healan from Spywareinfo.com has a good article about cookies and their spyware-esque function here: http://www.spywareinfo.net/july20,2005#cookies

    --
    To err is human, to really foul up requires a computer
    1. Re:3rd party cookies by Hektor_Troy · · Score: 1

      How does that work with iframe? I made a small program to do some fancy stuff with webpages, as they were loaded, and I couldn't help noticing that a LOT of sites use iframes for adds.

      Get something from we.track.you.biz/siteA and they set a cookie. Go to an unrelated server who embed we.track.you.biz/siteB iframes, and you're back on their server ...

      Don't see how blocking 3rd party cookies solves that.

      --
      We do not live in the 21st century. We live in the 20 second century.
    2. Re:3rd party cookies by JetTredmont · · Score: 2, Interesting

      Well, the browser seems to be smart enough for that. I don't get third-party cookies showing up (and I also don't see third-party images on iframe-based ads either).

  64. Not an issue by Anonymous Coward · · Score: 0

    My default browser (opera) has the flash-plugin disabled. It is also configured to throw away any cookie on exit.
    In those (rare) cases i want to open a flash-based web page, i just run Firefox. Obviously, also the "Red Panda" is configured to not to store any cookies after a session.
    And... er... yes i don't use Whinedows.

  65. Non issue by Anonymous Coward · · Score: 1, Informative

    As a small time webmaster with only intermediate programming experience (with the "P" languages), let me say this is a total non issue. If we want to track you, we will track you. If you turn off cookies, we'll just put a unique ID in every single link and form of the page we serve you. This ID will be implanted in every single link on the next page, and so on. Since increasingly whole sites are generated via database on the fly, this is not hard to do. It's just one extra param in each CGI-style GET or POST (except with mod_perl mod_php mod_python or J2EE it's way faster than CGI and we can do URL rewriting so it won't be obvious).

    And by the way, it is increasingly cheap to share this information with third parties. It used to be a big slowdown to communicate with other webservers (like those owned by marketing companies) over http using protocols like SOAP or XML-RPC. With processing, memory and bandwidth cheaper than ever, it's not a big issue to send your tracking information behind the scenes, further eliminating the need for tracking cookies.

    By turning off your cookies, you are simply making a little tougher to track you, ensuring only that larger more sophisticated sites can operate with viable business plans. So in "protecting your privacy" you are actually squeezing out small and marginal media competitors and preserving the Web for large corporations. Congrats!

    1. Re:Non issue by It+doesn't+come+easy · · Score: 1

      Why is it so many AC's are idiots?

      AC, the issue is that a third party wants to track users between sites. There's no issue with a webmaster tracking someone within their own site. What are you going to do, coordinate your unique ID across 10,000 webmasters? Good luck with that. (sounds like job security to me)

      PS. many of us turn off the forwarding link as well, or supply a randomly generated one hehe...

      --
      The NSA: The only part of the US government that actually listens.
    2. Re:Non issue by gstoddart · · Score: 1
      Why is it so many AC's are idiots?

      Because, that's their function?
      --
      Lost at C:>. Found at C.
  66. Know their customers?!? by Otto · · Score: 4, Insightful

    If they know their customers a little better...

    But they don't know me. They will never know me.

    "Knowing me" means knowing my name, shaking hands, asking me about things we've discussed in the past. That's being friends with somebody. That's knowing them. That's what your idea of the "clerk who recognizes your face" is about, no? The little guy running the corner market, sort of thing. :P

    Some dude running a website on the opposite side of the country will never know me. At best, he'll know what I've bought from him and other website owners that he shares information with or advertises with. Knowing what I buy doesn't mean he "knows me". It means he's treating me as an impersonal entity to be exploited, somebody to attempt to get more money from. It doesn't mean he's treating me as a fellow human being deserving of respect and friendship.

    No, fuck that, I'll remain a stranger to that guy across the country running a website, and I'll know the guy who sells me my fresh fruit down on the corner market, and I'm quite comfortable with that and don't see it as a conflict whatsoever.

    --
    - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
    1. Re:Know their customers?!? by Anonymous Coward · · Score: 0

      Good lord you must be a hoot at parties. Every business in existance wants to do one thing; sell you stuff. If you can't see how tracing someone's path through a website to a purchase may make it easier for them to sell more stuff then you are an idiot. If you can't see how a store wanting it to be easier to sell you stuff is better for you then you are an idiot. If you care that a store knows you buy stuff from them then go to a site they advertise on then you are a paranoid idiot.

      Although when you say things like "someone is evil because they might be able to do something I don't like" you are removing any doubt about being an idiot.

    2. Re:Know their customers?!? by Miros · · Score: 1

      I fully support your position, but I think I need to clarify my own since you obfruscated it a bit. When I say "know their customers" i dont mean that they know them individually, i mean that they know the general inclinations, trends, etc about their customer base as a whole. If one week a whole bunch of people i dont know look at nvidia video cards on my website, and then the next week 60% of the same group of people look at ati video cards, that tells me something, that gives me a hint of the winds of change and i know i should start working on getting better prices on the ati cards cause those are what people might be looking to buy. And honestly, you make almost no differnce to those people if you individually dont want cookies. That doesnt make you any differnt than most privacy advocates who simply like to remain safely anonymous. Oh, and it certainly benefits the customer if the business uses that information to change how it stocks or even what it stocks to better serve demand. That lowers costs, which leads to lower prices.

    3. Re:Know their customers?!? by Dun+Malg · · Score: 1
      If they know their customers a little better...

      But they don't know me. They will never know me.

      By "know you" they mean "know what sort of tricks to use to goad you into buying". Name? Nah. They'd just as soon have you staple a nice barcode to your forehead. In all but a very few instances, knowing your name is just another trick for getting you to buy. "Hello, John Smith. We have recommendations for you."

      --
      If a job's not worth doing, it's not worth doing right.
    4. Re:Know their customers?!? by Otto · · Score: 2, Insightful

      Every business in existance wants to do one thing; sell you stuff. If you can't see how tracing someone's path through a website to a purchase may make it easier for them to sell more stuff then you are an idiot. If you can't see how a store wanting it to be easier to sell you stuff is better for you then you are an idiot.

      I see those things perfectly clearly. However, unlike yourself, I also see that they probably do not have my best interests in mind when they are trying to "sell me stuff". My best interest is to deny them the ability to more effectively sell me stuff and use my own damn brain to decide what I want to buy, eh?

      --
      - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
    5. Re:Know their customers?!? by CrashRoX · · Score: 1

      Im not sure I agree with you. Since your unidentifiable, he doesnt know you. You are simply a tracking number, there to help improve the quality of the website. As you said technology to track from website to website and identify a person is unavailable at this point, so your privacy remains intact. I wouldnt even mind if the website owner, store clerk or sales person knew me. Yes they are there to make money. Thats what businesses do. The reason they make money is because YOU want a product and you exchange money for those goods (thats how the economy/market works). So if this is about them wanting more of your money, you should just stop buying. I would be me worried about my credit card being stolen. Now that will really make your identity known. Marketers will be a cake walk after that headache. I dont think I have cleared my cookies in ages. If you want to give me targeted advertising at least its better then something I dont want at all. Its still my option to buy. You control all the cards. Its no better then watching a show about cars and the commercials are about car accessories.

    6. Re:Know their customers?!? by Otto · · Score: 1

      When I say "know their customers" i dont mean that they know them individually, i mean that they know the general inclinations, trends, etc about their customer base as a whole.

      Fair enough, but getting that data doesn't mean that they need to individually enumerate every customer with an individual ID and track their every movement and have the ability to look at what each of them does on a second by second basis.

      It's not that they actually *use* that potential. But the potential is there nevertheless. The potential of adding a unique ID, persistent cookie, is going way, way, WAY beyond just "getting aggregate data", even if that does happen to be all they actually use it for.

      And honestly, you make almost no differnce to those people if you individually dont want cookies. That doesnt make you any differnt than most privacy advocates who simply like to remain safely anonymous.

      Individually, no, but then again, look at the original article that we're debating in the first place. When enough individuals start taking action, they have an impact.

      Oh, and it certainly benefits the customer if the business uses that information to change how it stocks or even what it stocks to better serve demand. That lowers costs, which leads to lower prices.

      My problem is not in them having aggregate information. My problem is that the way they obtain that information does not agree with the information that they are claiming to obtain. They don't need to track every user of their website from page to page on a persistant basis to know most of the things that you are suggesting. It's overkill, by a huge amount.

      --
      - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
    7. Re:Know their customers?!? by Otto · · Score: 1

      As you said technology to track from website to website and identify a person is unavailable at this point, so your privacy remains intact.

      Dunno where I said that. As soon as you make a purchase, he has your information. By placing his banner ads on other websites he can have his cookie sent back to him when you view that ad. Voila, personalized, site-to-site, tracking.

      He already has the stuff to do it in place, with just one persistent cookie. So I block them all until I trust that site. Simple.

      --
      - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
    8. Re:Know their customers?!? by Com2Kid · · Score: 1
      • My best interest is to deny them the ability to more effectively sell me stuff and use my own damn brain to decide what I want to buy, eh?


      Well now that depends, what if you are going to buy widget X from some store, but this one store that pays attention to you realizes this ahead of time so they put a price on widget X that is 10% lower than everyone elses?
    9. Re:Know their customers?!? by Otto · · Score: 1

      Exactly my point. They don't care about me as a person, they just want to figure out how to extract more money. No thanks, I'll pass on that one.

      --
      - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
    10. Re:Know their customers?!? by Otto · · Score: 1

      Well now that depends, what if you are going to buy widget X from some store, but this one store that pays attention to you realizes this ahead of time so they put a price on widget X that is 10% lower than everyone elses?

      If they can sell that widget for lower than everyone else and think that they'll actually make more profit, then why weren't they doing that before? Why isn't their regular price 10% below everyone else's?

      I've seen this argument a fair amount in this thread, and frankly I don't see that customized pricing on the individual level makes any sense. It doesn't allow them to get their profits up any, because people generally don't look for items on a product by product basis. They do comparison shop for larger items, but these are few and far between. For the vast majority of stuff I buy, I buy it at places that have consistently good prices and who have good service.

      For online purchases that means fast delivery, low prices, not trying to rape me on shipping costs, and good customer support if I have a problem or need to make a return. Lowest price might get me to try a store once, but it won't keep me coming back. I know lots of stores that I'll never use again because they screwed me on shipping costs on my first purchase.

      Personalized prices will make me leave a store and not shop there, period. Because while they might have a good price, I know that they might be simply screwing me when they could sell it lower if I had some kind of different "profile" in their system. No, fuck that. You give me the lowest price you can handle all the time. It doesn't always have to be the lowest in the world for me to buy it from you. I'll pay more for better service.

      But I will absolutely not abide you treating me as a "profile" and charging me more than you have to because you think you can get away with it based on what you know about me. That's just exploiting your data collection and trying to screw me over. No thanks.

      --
      - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
    11. Re:Know their customers?!? by phasm42 · · Score: 1

      This is not in your best interests. It is in your best interests to let them think they are influencing your purchasing decisions, in order to continue to get a free lunch from all the sites providing free content.

      I would hope that whether they show you an ad or not really doesn't affect you. It's like not listening to an opposing argument because you're afraid that you might actually agree, because your argument/mind is too weak. Your argument implies that if they show you an ad, it might convince you to buy stuff you don't want. If that's true, well, I guess all I can do is laugh. It's like an overweight person complaining that they're being made fat by advertisements for food -- they kept showing them food, they had to eat!

      Maybe it could even be argued that all the ads train us to be more callous to them, and their effectiveness will decline. Hell, think of when ads on the internet were around 10 years ago. The novelty may have actually worked. But then they had to get flashier and flashier to get people's attention. But that trend is reversing because in some cases it probably has a negative effect on sales (e.g., not buying from someone solely because of how irritating their ads were).

      --
      "No one likes working in a hamster wheel, and your shop smells of cedar shavings from here." - TaleSpinner
    12. Re:Know their customers?!? by Breakfast+Pants · · Score: 1

      "Personalized prices will make me leave a store and not shop there, period. Because while they might have a good price, I know that they might be simply screwing me when they could sell it lower if I had some kind of different "profile" in their system. No, fuck that. You give me the lowest price you can handle all the time. It doesn't always have to be the lowest in the world for me to buy it from you. I'll pay more for better service."

      I guess you don't buy DVDs then? Because if you think region codes are anything but ways to get the government to enforce price discrimination you are crazy (BUT!!! They are for distribution rights!! We don't want the early release in one country to affect a later release in another!--Umm, well guess what, the reason you are getting a later release is more often than not because that was the time a release in your area was calculated to return the most profit). In this case your whole country/continent is profiled, in the ones you mentioned you specifically were profiled. The principles are still the same however; you are still divided into a group and treated based on that group's characteristics. Personally I don't have a problem with it--I do however have a problem with the government enforcing it (especially under false, or at best dubious, pretenses.) as the US government has with the DMCA.

      --

      --

      WHO ATE MY BREAKFAST PANTS?
    13. Re:Know their customers?!? by Hungry+Student · · Score: 2, Insightful

      Welcome to the new age. Information is now far more profitable than any tangible good. It surprises me that people on a technology website are so unaware or unwilling to realise this, despite the fact it is technology and the internet that's increasing the pace and efficiency of this new market.

      You are not valuable, your information is, but not on its own, nobody is sufficiently important to warrant any company to change its habits based on one customer. Once information is collated and processed, it becomes immensely powerful and profitable, that is what these companies seek.

      Your cookie contents are data, the collation, manipulation and processing of said data becomes information, to be used and/or sold to improve the experience of the customer and the profits of the company.

    14. Re:Know their customers?!? by cdrguru · · Score: 1

      Actually, DVD region codes are for censorship. UK has a different policy vs. the US for what they will rate as what level and so on. Australia is different again. The only way they can keep US DVDs out of UK and so forth is region coding.

      There are places in the world with distinctly different ideas about what is acceptable in a movie - region coding allows countries to decide for themselves.

      Yes, region coding is "broken" so this isn't absolute protection. But it is how some kind of world-wide movie standard got accepted. It is much better than the VHS system - import restrictions.

    15. Re:Know their customers?!? by deaddrunk · · Score: 1

      It also conveniently prevents Europeans like myself from ordering it from the US for far less money (or buying it if I can put up with the eternity it takes to get through your immigration to visit your country)

      --
      Does a Christian soccer team even need a goalkeeper?
    16. Re:Know their customers?!? by Anonymous Coward · · Score: 0

      Some dude running a website on the opposite side of the country will never know me. At best, he'll know what I've bought from him and other website owners that he shares information with or advertises with.

      He'll know your credit card number, your name and address, what kind of dildo you ordered for your girlfriend (whoops, forgot this is slashdot), and what kind of pr0n sites you prefer looking at.

      Even your friends probably don't know all those details.

    17. Re:Know their customers?!? by Miros · · Score: 1

      I think your problem is that you're way overestimating just how much high traffic web sites care about you. Fact is, they probably dont. Besides, if they're trying to find out more about you, there are certainly better more efficient and effective ways than cookies, and there are certainly plenty of 'evil' people out there trying to get your information who are not running websites. Do you like, trust your mailman? Cause if you attempt to think about how many places the privacy of the postal system can fail you'll go nuts. "Well, maybe if i go pick it up at the post office... no wait, the sorting facility... no wait, the people who sent it to me... wait, how do i know who sent it too me? what if i missed one?" etc. etc. Bottom line, paranoia such as yours can be paralyzing. But people like you are good, you're out there fighting the good fight for better privacy and our rights not to give people little token bits of information we dont have too. It's because of people like you that people like me dont have to go so nuts about this stuff. So, i guess what i'm trying to say is: thanks, keep up the good work!

    18. Re:Know their customers?!? by Otto · · Score: 1

      I think your problem is that you're way overestimating just how much high traffic web sites care about you. Fact is, they probably dont.

      Agreed, they probably don't. But they probably do store that data, and if, by chance, somebody with a reason wanted to mine that data and look for such details, then they could. I don't know who has access to that data. Which is the point, really, you don't *know* what will be done with it. Better to simply prevent the data collection in the first place than to try and get rid of it after the fact.

      Besides, if they're trying to find out more about you, there are certainly better more efficient and effective ways than cookies,

      Agreed. But eliminating cookies is a simple measure you can do yourself. Hell, it's built into the Firefox browser. Can be done in the settings easily.

      and there are certainly plenty of 'evil' people out there trying to get your information who are not running websites.

      Again, no doubt. This is not the only measure one should take to protect their privacy, just a rather simple one that anybody can do without any extra effort, really.

      --
      - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
    19. Re:Know their customers?!? by NickFortune · · Score: 1
      This is not in your best interests.

      I'll be the judge of that, thank you.

      I would hope that whether they show you an ad or not really doesn't affect you. It's like not listening to an opposing argument because you're afraid that you might actually agree, because your argument/mind is too weak.

      Sir, but I have better things to do than stand in one place 24/7 while every idiot in the world lines up to regale me, one by one, with the same brain dead arguments again and again.

      You proceede from a false premise. I block advertisments that annoy me, that disrupt my concentration, and that waste my time.

      Advertisments that fail to offend me are not blocked. This should serve the evolutionary purpose as allow the wetched things to waste my working time. Of course, agencies that persistently offend are blocked too. I trust this too will provide badly needed feedback into the system.

      --
      Don't let THEM immanentize the Eschaton!
  67. Windows-only solution to automatic cookie deletion by LightningBolt! · · Score: 1

    Just set up your browser to store your cookies on a ramdisk. Then, at least twice a day, your cookies will be cleaned out while you are rebooting the machine.

    --
    Old people fall. Young people spring. Rich people summer and winter.
  68. Questions about Altering Cookies by ehaggis · · Score: 1

    Could someone develop a "prepackaged" cookies folder to make marketing data useless? For example, copy useless (or altered) info into Clickit, Webtracker or some other notorious cross domain cookie file. And then install this into your browser once a month. Anyone who is a developer or savvy with these things, I would like to know is this feasible or practical? Would it have an impact?

    --
    One ring to bind them - should probably have more fiber and less rings in their diet.
    1. Re:Questions about Altering Cookies by Avohir · · Score: 1

      unnecessary, just block the sites they originate from. I reccomend the mvps hosts file http://www.mvps.org/winhelp2002/hosts.txt

      --
      To err is human, to really foul up requires a computer
    2. Re:Questions about Altering Cookies by ehaggis · · Score: 1

      Thanks, Very Cool. It is ashame turning off cookies is such a pain, but this is very helpful.

      --
      One ring to bind them - should probably have more fiber and less rings in their diet.
  69. Persistent tracking by QuestorTapes · · Score: 1

    No, it doesn't make you -evil-. It may make you an obstacle. This case is no different than other types of customer shopping/purchasing metrics, both web-based and physical. Like Radio Shack collecting phone numbers, or CVS handing out discount cards like penny candy. I don't want it from them, either.

    The biggest problem here is "when is there a presumption of innocence?" In your case, since you are doing nothing nefarious, you wish to be presumed innocent until proven guilty. Unfortunately, there has been a -consistent-, -systematic- trend toward greater and greater abuses of customer personal information by businesses.

    Given this fact, many people, myself included, have chosen to presume that businesses that wish to track -any- information, no matter how innocuous it may seem, are up to no good, and actively prevent it.

    You can no longer rely on -being innocent- to give you an expectation that customers will treat you as innocent. Like a repeat mugging victim, your customers have developed a highly suspicious nature. Too bad if your resemblance to the guy who mugged them before is a coincidence. They are going to view you with suspicion, regardless of what you may do in future.

    It's unfortunate for you. But no one is going to weep for you. We are more concerned about our own, congoing pain.

    You state: "To track users, I gave them a single, persistant cookie that contained only a GUID." Terrific; as anonymous as it gets. One problem; every browser I know of asks somthing like, "Site example.com wishes to set a cookie. Do you wish to accept?" It never tells me, "...and the entire contents of the cookie is a GUID, used solely for nonspecific statistical purposes. It is not tied to any identifying information about you."

    And, in truth, it can't. Because a GUID like that -can- be tied to other information stored on the server and used for tracking. I don't know what your server is doing, and even if you told me, I would not be likely to believe you. Like the telemarketers who call my home asking for donations for charities, I am -bombarded- with constant requests, and do not have the time to examine each one to determine if they are legitimate. So I do the expedient thing, and assume that they are fraudulent.

    I do the same with cookies. Unless I see a reason to allow them, I say "block it". And I allow only -session- cookies by default.

    Sorry if this sounds cold. It sucks for you, but that's really not my problem.

  70. My sig sez it all ..... by bizitch · · Score: 1

    re:below

    --
    ---- "Logoff! That cookie shit makes me nervous!" - A. Soprano
  71. Re:Windows-only solution to automatic cookie delet by finse · · Score: 0, Troll

    What version of Windows are you using?

    mod this one as a troll...

    --
    Paranoid tinfoil hat crowd say Y here, everyone else say N.
  72. Nope... by Otto · · Score: 1

    That isn't assessing risk on a case by case basis, its ASSUMING high risk and contravention and only later opening up.

    Assessing risk on a case by case basis would mean you think both +ve and -ve and get to an answer. Saying NO! everytime just indicates that you are either paranoid or work in Microsoft desktop support.


    But removing persistent cookies isn't a "NO!" response. A NO! would be blocking cookies entirely. That's my -ve position.

    My +ve position is whitelisting, allowing persistent cookies.

    But my neutral position is the default one. Allowing persistant cookies, but changing them into session cookies (essentially). This allows all the persistant cookie crap to actually work properly, but doesn't allow the person to track me across sessions. That's the "don't know yet" position. When I have enough info to know, then I either block or allow the site to set cookies.

    --
    - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
  73. Oh, I forgot one... by phillymjs · · Score: 1

    Now they're abusing DVDs by putting unskippable ads on those. It remains to be seen what the backlash from that one will be, but probably either people will stop buying them, or the Asian commodity consumer electronics companies will start (if they haven't already) cranking out DVD players that ignore previously-unskippable crap or let you skip it.

    ~Philly

    1. Re:Oh, I forgot one... by Anonymous Coward · · Score: 1, Interesting

      Now they're abusing DVDs by putting unskippable ads on those. It remains to be seen what the backlash from that one will be, but probably either people will stop buying them

      I bought Shrek 2 on DVD.

      Honestly, if another DVD comes out from DreamWorks that I really want then I'll probably buy it.

      But I know absolutely for certain that I'll never buy or go to see Madagascar. The experience of being forced to sit through their advert in order to watch the DVD I PAID FOR has left me with a deep and lasting loathing for that movie which I mght otherwise have liked (since I liked other DreamWorks movies). Furthermore, if I ever meet the guy who does that intro I swear I'll kill him.

    2. Re:Oh, I forgot one... by KD5YPT · · Score: 1

      I like my Korean DVD Player that plays movie that skips ads (the only place it can't skip is the intro, fast forwarding past them is possible).

      --
      In US, you can easily buy enough major firearms to wipe out your neighbourhood but a few little fireworks are banned.
    3. Re:Oh, I forgot one... by Anonymous Coward · · Score: 0

      A junk faxer paid for my new Power Mac G5... so that makes me an asshole?

      It makes you a Mac user, is there a difference?

    4. Re:Oh, I forgot one... by typical · · Score: 1

      I use mplayer. I've never used a hardware DVD player in my life. The only time I've ever seen an unskippable ad was when I was watching The Matrix on a friend's Windows computer, equipped with a DVDCA-approved player. I was astounded that anyone would put up with that kind of crap on the products they buy.

      --
      Any program relying on (nontrivial) preemptive multithreading will be buggy.
  74. There's only one thing that needs said. by Fordiman · · Score: 1

    "Good"

    --
    110100 1101000 1101000 1100110 0 1101111 1101000 1100011 1
  75. Well, tough .... by gstoddart · · Score: 4, Insightful

    Too bad if the marketers don't like that people delete cookies.

    Companies like doubleclick and the ones who seem to only serve up annoying advertising have no expectation that I will a) accept their cookie (if you're not the site I'm visiting, why do you get a cookie?) or b) even if I did accept their cookie, that I would keep it.

    The real world would be tagging your clients. Someone comes in to browse, you snap an ear collar on him. You walk into another store, someone wants to stamp the back of your hand indicating that you've shopped there.

    I had a person at my door asking if I'd received my flyers -- when I told her than if I had I'd tossed them in the bin, she wanted my name and phone number. What part of I'm not interested in your flyer, and you don't need my contact info to respond to this?

    I wouldn't accept K-Mart putting a radio tracking collar on me, WTF do on-line marketers think they're any different?

    --
    Lost at C:>. Found at C.
    1. Re:Well, tough .... by k4_pacific · · Score: 1

      This should be modded -1 wrong. I've shopped at KMart numerous times, and I've never been asked to wear a tracking caller. One time, though, they insisted I wear socks, but I was trying on shoes that day.

      --
      Unknown host pong.
    2. Re:Well, tough .... by mph_sd · · Score: 1
      I wouldn't accept K-Mart putting a radio tracking collar on me, WTF do on-line marketers think they're any different?
      I think a closer analogy would be using a loyalty card at k-mart; they track your spending habits, you save money on various purchases. It's hardly a radio tracking collar. For the record I do use loyalty cards to buy groceries (and save money) while being fully aware that my spending habits are being tracked.
    3. Re:Well, tough .... by dapyx · · Score: 1

      No, a loyalty card does not tell the marketer where you enter the store and buy nothing or the exact path you take when you walk through the store.

      --
      I'm sorry, the number you have dialed is an imaginary number. Please rotate your phone 90 degrees and dial again.
    4. Re:Well, tough .... by vhold · · Score: 1

      Countdown until loyalty cards with RFID and RFID sensors throughout store in..

      5..

      4..

      3..

      The major difference of course is that loyalty cards tend to offer pretty difficult to ignore discounts. If a website come out and said "Turn on your cookies to get great features like.. blah blah blah.." then it'd be almost exactly like loyalty cards now.

  76. Re:Windows-only solution to automatic cookie delet by LightningBolt! · · Score: 1

    Troll? You mean like this recent posting of yours?

    Quote:
    "The G5 is a joy to use. I wish I could say the same for other friends/family still under the iron grip of another, unamed, OS vendor."

    --
    Old people fall. Young people spring. Rich people summer and winter.
  77. Yes, but... by Otto · · Score: 1

    Companies collect this information in aggregate, nobody cares about you and the few pages you looked at unless they have data for thousands of other people as well.

    I agree, however, do you think they throw this data away after they have their aggregate information? No, because they might want to sort it by some other thing later and draw different info from it.

    So all that raw data is lying around somewhere. And if I happen, later down the line, to piss somebody with access to that data off (this is not as much of a long shot as you might think, I piss a lot of people off regularly) then they might go mining that data for info about me to use against me in some fashion.

    Now yes, that is a little paranoid... But it's so simple to eliminate that entirely by simply muddying up the data trail that it's a simple cost-benefit thing. It costs me nothing to muddy up the data a bit, and the potential benefit is small, but more than nothing. So QED, might as well do it. It hurts me not in the slightest to do just that.

    --
    - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
  78. ah, I forgot... by mardoen · · Score: 1

    *deletes cookies*

  79. what we need by happyemoticon · · Score: 2, Insightful

    is a rider on the next Iraq spending bill that makes deleting cookies and blocking popups illegal.

  80. the day I learned to delete cookies by Anonymous Coward · · Score: 0

    "Honey? What's this file from www.chicks-doing-farm-animals.com?"

  81. No benefit to consumers, then no cookies by Vellmont · · Score: 3, Interesting

    Should web marketers really be surprised that constantly tagging people and most of the time and giving them no benefit at all makes them nervous? What if you had your hand stamped with invisible ink every time you went into a store, and received nothing for it? How many people would want to allow that?

    The thing is that these marketers want something for nothing. I enable the "ask for each cookie" option in mozilla, and generally click "allow for session" on 99% of most sites because they offer me NOTHING in return for tagging me. On sites like Amazon.com I can add things to my wish list without logging in, or on slashdot I can login without typing in passwords. Tvguide.com will show me my local listings, cool. I've gotten a benefit from the site knowing who I am, so I'm much more likely to allow them to know that.

    Most sites that hand out cookies give you nothing for identifying you. Why should I give them somthing they want for nothing? I certainly don't trust the average marketer to not do skeevy things like targeted pricing (looks like I visit bmw.com a lot.. I must be rich. Raise my prices by 10%).

    --
    AccountKiller
    1. Re:No benefit to consumers, then no cookies by arantius · · Score: 1

      Because they, by giving money for hosting advertimsements, have paid for the site you are gleaning information from. Would you rather pay for it?

      --
      Health is simply dying at the slowest rate possible.
    2. Re:No benefit to consumers, then no cookies by Vellmont · · Score: 1

      I don't have problems with ads, at least non-intrusive ones. I do have problems with cookies. I think that's a fairly typical reaction. I don't hear many people complaining about banner ads, but EVERYONE hates the frickin popups. Obviously this cookie business is getting to be like popups ads. People just aren't willing to tolerate this crap.

      Would you rather pay for it?

      You seem to misunderstand the power relationship. Most people aren't willing to pay for unknown content. The question is rather would content providers rather no one go to their site?

      --
      AccountKiller
    3. Re:No benefit to consumers, then no cookies by jonadab · · Score: 1

      > I enable the "ask for each cookie" option in mozilla,

      I tried that once. It was unbelievable how tedious browsing the web became. I had to turn it back off wihin a few minutes; otherwise, I'd have gone insane.

      What I do now is just limit the max lifetime of cookies. That seems to keep things pretty well under control. Things like forum logins and shopping carts still work, but I don't accumulate hundreds of thousands of worthless cookies from sites I'm probably never going to visit again.

      --
      Cut that out, or I will ship you to Norilsk in a box.
  82. Re:Tracking customer behavior by Deliveranc3 · · Score: 1

    So they didn't actually lose the sale, you sir are a paragon of consumer advocacy.

    And that is why they do this...

  83. Boo hoo, cry me a river... by Jugalator · · Score: 1

    IMHO, cookies were intended to make web sites stateful, not people.

    If you make your pretty network of ad servers to track my steps, to me that's abusing the rights I give you to store data on my computer, and I act accordingly. Store info for your site alone to make it stateful and directly enhance the services it can provide me, and I won't. One may say "but without ads, our services will get worse", but in that case I'd like your competition as a web site with the rest of the world speak. And so far I'm seeing little to no proof that an ad ridden site is an excellent site, anyway. I think there's almost no relationship, personally.

    They should be happy users have been relatively clueless for this long instead. :-p

    --
    Beware: In C++, your friends can see your privates!
  84. Cookie Monsters by Doc+Ruby · · Score: 4, Interesting

    A client/server system without persistent client state is unuseably crippled. Cookies are a simple way to get that. If users are flushing them once a month, but need not, they must be balancing the convenience of persistence with their perceived "privacy". If just the marketers are complaining, I don't care. When the engineers complain that no persistent client state is crippling our apps, then I care.

    Marketers could stop complaining, and fund better UIs that decrease the false perception that cookies are bad. Their stealth makes them sinister, and their unmanageability makes people throw out the benign majority with the tiny malign minority. But only a generation of marketdroids could taint the deep-seated pleasant associations with "cookies" into fear of deadly poison. If they rechanelled their complaints into better UIs, they'd be "engineers", not marketdroids. So they're doomed. If only they were as doomed as the cookies they mourn.

    --

    --
    make install -not war

    1. Re:Cookie Monsters by what+about · · Score: 1

      To be able to do "persistent client state" you need to be able to identify a well defined client while the browser is active, to do this you use cookies that are in memory, they do not need to be saved on the computer.

      If you also want to save other information about your user, then just log them in in the server so it is clear that they are accessing something that is storing their information.

      So, if it is important to store information then you can do it even without persistent cookies, if it is not important then stop profiling me.

      On a side note, I am a bit annoyed that slashdot keeps all my posts associated with me forever, there should be a time limit over which all posts become really anonymous. The message should be valued for the message in itself not because somebody said it.

    2. Re:Cookie Monsters by KD5YPT · · Score: 1

      So, if it is important to store information then you can do it even without persistent cookies, if it is not important then stop profiling me.


      Hm... I wonder why everyone still bitches about NYT's registration thingy... hm...

      On a side note, I am a bit annoyed that slashdot keeps all my posts associated with me forever, there should be a time limit over which all posts become really anonymous. The message should be valued for the message in itself not because somebody said it.


      The "Post Anonymously" checkbox is your friend.

      --
      In US, you can easily buy enough major firearms to wipe out your neighbourhood but a few little fireworks are banned.
    3. Re:Cookie Monsters by Doc+Ruby · · Score: 1

      That's just persistence in a session, not intersession. And "in memory" is a nuance - most users unsophisticated enough to fear cookies because they "save unknown info on your computer, like a virus" don't distinguish between memory and hard drive. Because they shouldn't, anyway.

      --

      --
      make install -not war

    4. Re:Cookie Monsters by NickFortune · · Score: 1
      A client/server system without persistent client state is unuseably crippled.

      But my client - my web browser - does have a persistent state. It knows exactly what state it's in, and doesn't need cookies to keep track of itself. Oh wait, let me guess, you meant a persistent client state accessable by the server?

      Unfortunately, in that case, your statement simply isn't true. There are countless client/server applications that work perfectly well with a stateless server. I've designed a few of them myself.

      Consider a web server and my browser. I can block cookies entirely And you know what? If I do that, the vast majority of web sites function just fine, thank you. I don't call that "unusably crippled".

      Of course, there are some applications where the server needs knowledge of client state. And if you're trying to implement such a servive with a web architecure using a standard webserver, then it's not going to work with browsers that disable cookies.

      Marketers could stop complaining, and fund better UIs that decrease the false perception that cookies are bad.

      So attempt to change peoples perceptions rather than change the behavior that led to the problem. How very "marketing".

      BTW, if the perception of cookies as "bad" is false, so is any perception that they are "good". Cookies are an amoral technology. It is only the use to which they are put that can be considered in terms of morality.

      Their stealth makes them sinister, and their unmanageability makes people throw out the benign majority with the tiny malign minority.

      Yet somehow, in the days before I blocked all bar session cookies, the persistent third party tracking cookies used to be far more prevalent than the sessions ones.

      I think I have to dispute your proportions here.

      --
      Don't let THEM immanentize the Eschaton!
    5. Re:Cookie Monsters by Doc+Ruby · · Score: 1

      Your browser's state, independent of the server's access to it, is not part of the "client/server" system, so it's irrelevant. Your email MUA has a state too, but that's also irrelevant to the Web C/S infosystem, unless accessible to the server.

      Sure, my "unuseably crippled" statement is obviously an exaggeration, as demonstrated by the use of Web C/S systems by the people whose "cookie flushing" behavior kicked off this discussion. But without intersession state history, accessible to the server, C/S apps must remain closer to brochureware websites than to hypermedia environments. Which is one reason why the Web is still more a brochure than an environment.

      Now, you've done some exaggeration of your own, really into a different category, with your distortion of my statement that marketers should do something to fix the problem, rather than just complain about it. A better UI, that lets people manage harmless cookies, and distinguish ones that store info they'd rather forget, is not just a change to their perceptions, instead of their behavior. It is a change to their behavior, which affects their perceptions. Your argument is so disingenuous as to be specious.

      Likewise with your projection of "morality" onto the "goodness" or "badness" of cookies. Cookies that threaten security, like privacy, are bad. Cookies that merely retain history the user requires to continue future use are good. It's a question of utility, not morality, and costs/risks. Of course it has nothing to do with the "morality" of a technology, and everything to do with the value proposition of cookie technology. Even if you think a term like "value proposition" is marketspeak - it's a real measure.

      So you decided to forgo persistent cookies, giving up applications which rely on session histories. That's your choice. You're a SW designer, so the current UI is sufficient for you, as is the more tedious interaction without session history. Most people will use more compex apps when they're more convenient than that, and need a better UI. That helps them distinguish between "tracking" and "history", which is a matter of their perception of their own privacy. A largely false perception, as it calls private a transaction with another party, the server, that can be shared by them without restriction, regardless of cookies. But since perceptions matter, in scaling the innuendo that inhibits people's using cookies to their individual best advantage, the technology should reflect that. Just complaining about it, like marketers do, isn't helping. Just shutting them off, which severely limits the features of the platform, is also inadequate. And exaggerating the simplicity or adequacy of the current state isn't helping either. At the very least it lets marketers validate their whining, calling the engineers complacent and nerdy, which perpetuates their whining.

      --

      --
      make install -not war

    6. Re:Cookie Monsters by NickFortune · · Score: 1
      Your browser's state, independent of the server's access to it, is not part of the "client/server" system, so it's irrelevant. Your email MUA has a state too, but that's also irrelevant to the Web C/S infosystem, unless accessible to the server.

      That turns out not to be the case. The client state determines which requests get sent; the server doesn't care. Were you really unaware of this, or was it just your turn to be "so disingenuous as to be specious?"

      Now, you've done some exaggeration of your own, really into a different category, with your distortion of my statement that marketers should do something to fix the problem, rather than just complain about it.

      You said "change the false perception". That's very much a marketer's way of thinking.

      Likewise with your projection of "morality" onto the "goodness" or "badness" of cookies

      Um, your projection, not mine. I argued for their amorality. That's "amoral" as distinct from "immoral", yes?

      Of course it has nothing to do with the "morality" of a technology

      So you're agreeing with me, albeit in a highly contentious tone. Fair enough.

      Most people will use more compex apps when they're more convenient than that, and need a better UI. That helps them distinguish between "tracking" and "history", which is a matter of their perception of their own privacy.

      Perhaps it would help if you said what this UI had to be applied to. I've been assuming you meant bettre UIs for web apps, but perhaps you meant browsers.

      But even if you did, I can't see what would stop the forces of darkness using "session history" cookies to store tracking data. To whatever limited extent they may differ in the first place.

      Just complaining about it, like marketers do, isn't helping. Just shutting them off, which severely limits the features of the platform, is also inadequate.

      Personally, I allow session cookies by default, and I can whitelist any site that can convince me they have a need to track my behavior between visits. The only one to come close there is google so I can store my prefs.

      Within those parameters, I can't really see what you hope to achive. I'll grant people could do with a better understanding of what cookies do and why session cookies can be a good idea. But you've far from convinced me that there's a case for intersession cookies, or that there could be a way to discriminate between "session history" cookies and trackers.

      So, I'm sorry but at the moment it just sounds like you're looking for a form of words that'll let marketers sneak tracking cookies in through the back door under the guise of session history. That's not an accusation BTW, just explaining how it sounds to me given my imperfect understanding of your aims.

      --
      Don't let THEM immanentize the Eschaton!
    7. Re:Cookie Monsters by typical · · Score: 1

      A client/server system without persistent client state is unuseably crippled.

      See, I just don't feel that way.

      On the few sites that I agree, I have a login and password. I know *exactly* what information I'm handing out. I don't use it, but Firefox has a Password Manager that can handle all that if I want a keychain-type interface. That way, *I* choose out when I want to be trackable. Not surprisingly, website producers want me to *always* be trackable, even though they have no real need other than marketing reasons.

      --
      Any program relying on (nontrivial) preemptive multithreading will be buggy.
    8. Re:Cookie Monsters by Doc+Ruby · · Score: 1

      Let me cut through this cloudy ambiguity. The cookie represents the state of the client/server system, stored between sessions. It's misleading to call it either "client state" or "server state", certainly to make a distinction between the two, when we're talking about the session, which is the state of the system, composed of both client and server. Storing it solely on the server is impossible, because the client originates the requests, selecting the server to which to deliver the stored state for producing the next state. Storing it on the server, exclusive of the client, makes it impossible to associate the stored state with the client. Storing an ID on the client for such association is the same as storing a cookie - it's persistent, intersession state of the system, stored on the client, even if more state is stored on the server. Which of course is how cookies work: much of the state to which they refer is stored on (or generated by) the server.

      We agree that many people don't like cookies, and destroy them (or decline to store them), thereby discarding intersession state. That makes a whole range of apps impossible, or prohibitively complex/expensive. Which sounds bad to me, a developer and businessman. Which means my interests have some overlap with the whining marketers, the subject of the article we're discussing. So I propose that we'd be better off if users could more easily control their cookies - at least the kind of control you describe exercising yourself. But with a UI easy enough to make it available to most people, who can't handle anything more complex than a mouse and an underlined hyperlink. Even the right mouse button makes them anxious. If they could more easily deal with cookies, as related to websites, and their history, than the grimly crude features we've all got, they would flush them out less indiscriminately. More apps would have intersession state available. Maybe *you* like logging in to every app you use every few days, to recover session state from the server, but most people don't. Especially when using several interdependent apps at a time, on different servers, like paying bills - especially juggling payments and cutoff dates. I would be happy, because the masses would get as much use out of cookies as you do, with your superior techniques. Which creates a bigger market more easily satisfied by my software, without my jumping through hoops to integrate across time and namespaces. I would be happier myself it that were easier, without requiring that I allow every site I visit to store my history - or flush them all.

      Along the way, the marketers would be more happy, too, about the things that everyone else is happier about. So I said that the marketers should, rather than just whining, fund the development of the better UI. Now, what's wrong with any of that?

      --

      --
      make install -not war

    9. Re:Cookie Monsters by Doc+Ruby · · Score: 1

      That password manager is a step closer to an easy UI for managing client state. Those passwords are keys to the server-side state stored as a lookup to your login. They're minimalist cookies. Because you control them, with a UI you like, you trust them. But they're otherwise exactly the same as cookies. Which is exactly what I'm talking about. If you couldn't log in to those servers, but started from "scratch" every time you hit them, they'd be unusably crippled. Like me, all you want is a good UI that keeps you easily informed about the info you're managing, dispelling the sinister uncertainty of unexamined cookies lurking on your system.

      --

      --
      make install -not war

    10. Re:Cookie Monsters by NickFortune · · Score: 1
      Let me cut through this cloudy ambiguity. The cookie represents the state of the client/server system, stored between sessions. It's misleading to call it either "client state" or "server state", certainly to make a distinction between the two, when we're talking about the session, which is the state of the system, composed of both client and server.

      That's broadly true for web based sessions, but not for client/server in general. Quick example: imagine a client/server based flight sim. There's at least three ways you could write it:

      • Server stores the state: The client sends control signals and receives bitmaps for display. all the simulation is done on the server.
      • Client stores the state: Client does all the simulation. All the server does is return map info. Requests are of the form: give me the view from map co-ordinate x,y at bearing 090, so the server is stateless.
      • Hybrid: client stores plane internal state (speed, height, fuel), server stores plane location. This works well for multiplayer games where the server needs to know where each player is, but detailed calculation can be better done on client machines.
      That's being just a bit picky, I'll admit. Still, the point is that there's more to client/server than just webapps.

      So I said that the marketers should, rather than just whining, fund the development of the better UI. Now, what's wrong with any of that?

      Nothing I can see. Although I am going to be looking with suspicion at any marketing specced UI, since what they call "functionality" I tend to call "spyware".

      That said, there are a few firefox extensions that do pretty much what you want already. I can see you'd want to tweak the interface a bit given your target audience, but the basics are there. That and a bit of firefox evangelism...

      --
      Don't let THEM immanentize the Eschaton!
  85. Cookies losing effectiveness? by commodoresloat · · Score: 1

    You're just not cooking them with enough of the magic butter.

  86. Re:Tracking customer behavior by cpeterso · · Score: 1


    Asking for your phone number is too personal, but many stores as for your ZIP code. I freely hand out my ZIP code. I figure that giving accurate geographic/demographic info to stores I like (why else would I be shopping there?) helps me in the long run.

    Though I am annoyed by gas station pumps that ask for my ZIP code to improve credit card security. I once made a typo when entering my ZIP code and yet my credit card was not rejected. Liars.

  87. Re:Tracking customer behavior by The+Warlock · · Score: 1

    I hand out my ZIP code. It's 12121. They usually think I'm making it up.

    --
    I've upped my standards, so up yours.
  88. Re:Tracking customer behavior by cpeterso · · Score: 1


    Good point. At least you don't live in ZIP code 12345 (Schenectady, NY)!

  89. Re:Tracking customer behavior by Anonymous Coward · · Score: 2, Funny

    agreed. Best Buy has been doing this for some time. The clerk said she had to have my phone number and I said that she didn't. Turned out she was wrong and I was right. Still left the store without purchasing.....oh shit!

    Duh!!! She was asking for my phone number!!!

    **Idiot**

    Gotta get back to Best Buy.

    Later

  90. If not, what then? by NickFortune · · Score: 1
    Does that still make me evil?

    If I said "no", what would be your next point?

    It sounds like you're laying the foundation for a claim that cookie deletion deprives you and your family of income.

    From there, you can try and make a case that visitors to a site have a moral, and possibly legal, obligation not to delete cookies. (If that sounds far fetched, someone actually tried it on with me the last time this topic came up).

    The fact that you restricted your use of cookies to ethical activities does not mean that others are similarly restrained. It's the others that brought cookie use in disrepute, and it is for their benefit that so many people have taken to deleting cookies.

    --
    Don't let THEM immanentize the Eschaton!
  91. A Matter of Perspective by HTH+NE1 · · Score: 1

    Still, the article is a good overview of life from the marketer's perspective.

    You got anything written from the vampire's point-of-view?

    Oh, right. You already said "marketer's".

    --
    Oh, say does that Star-Spangled Banner entwine / The myrtle of Venus with Bacchus's vine?
  92. A Few Facts by periol · · Score: 1

    1. We live in a world where it is not an option not to buy things.

    2. We live in a world where corporations exist only to make as much money as possible, regardless of how that happens (and no matter how much they try to tell you otherwise).

    3. We live in a world where companies will use knowledge they have gained from tracking me to make me pay more money than I have to pay. Online and offline.

  93. Re:Tracking customer behavior by blitz487 · · Score: 4, Insightful
    I had a similar experience. I went into a computer store to buy a printer. The cashier wanted my home address. I said "no". The cashier said it was their policy for all sales. I asked for the manager, who repeated that line. I asked him if he was willing to give up the sale for his policy. He said "yes", and I said it was my policy to not give out my address, and I left.

    I went to his competitor up the street, bought the same printer. I told the story to the store manager there, who had a nice laugh and was happy to get my money.

  94. Options I browse with by Fastball · · Score: 1

    [X] Only accept cookies from originating server
    [X] Automatically accept session cookies

    Default Policy
    (X) Ask for confirmation
    ( ) Accept all cookies
    ( ) Reject all cookies

    This allows me to sort the wheat from the chaff. After a while, my cookie preferences stiffarm the tracking cookies to the point that I don't have to react to every cookie thrown at me.

    Fuck 'em.

  95. Absolute and relative standards rantlet by QuestorTapes · · Score: 1

    > Most marketing companies are rather decent people trying to find you the customer who wants their
    > product. A VERY small % of marketing companies are shady info-whoring bastards.

    Yes and no. Part of the problem is "what is decent." Some people, myself included, believe in an absolute moral standard.

    But a large number of people use a relative standard. A lot of the marketing folks who are not 'evil', but not angels by any stretch, justify their actions by comparing themselves to other marketers.

    A lot of us don't feel the majority of marketers are as benevolent as you seem to. Not because they're 'evil', but because they refuse to follow absolute standards, and they refuse to live with the consequences of failing to meet these standards; a lost customer.

    > Targetted marking is a rather nice thing as far as I am concerned. When offered to provide
    > interests, and the resulting ads, I find myself visiting the link.

    I haven't seen any marketing targeted well enough to warrant even a single useful look.

    > WHAT I HATE is misdirected marketing

    Agreed. But the reality is, even when I provide the data they want, I fall into the cracks. I am an atypical person, who doesn't fit any of the standard pigeonholes. From my standpoint, -all- targeted marketing is misdirected marketing. Not for everyone, but for me.

    I suspect many people have had similar experiences.

  96. It is really quite simple... by geoff+lane · · Score: 1

    ...if you annoy me you've lost even the vague possibility of a sale.

    It's a myth that there is no such thing as bad advertising. Product name recognition works both ways. For me, I can easily remember why I don't buy from some sources.

    The "data" obtained by the methods described is very low grade and often totally useless.

  97. And in other news ... by Skapare · · Score: 1

    And in other news, Internet marketers are worried that people don't seem to like the marketing efforts being made towards them.

    --
    now we need to go OSS in diesel cars
  98. Re:Tracking customer behavior by Just+Some+Guy · · Score: 2, Funny
    Boy, you sure showed them.

    Here's how I handle it:

    Cashier: May I have your phone number?
    Me: Sure! It's $(friend's ex-wife's phone number), and I'll love to hear more about other promotions you may have in the future.

    --
    Dewey, what part of this looks like authorities should be involved?
  99. I used to work at an ad agency by Retired+Replicant · · Score: 1
    The interactive marketing folks were the biggest bunch of bullshit artists I have ever dealt with. All you needed to be an interactive marketing expert was to know the fresh new meaningless industry buzzword-of-the-week, and be shameless in your willingness to overstate the benefit of your medium compared to traditional media. When users smartenened up and click-through rates nosedived, they immediately took refuge in the same, soft brand-awareness and brand-identity metrics that they used to put down traditional media for relying on.

    Way back in 2000, I asked them what they were going to do when people wised up and started deleting cookies in greater numbers, and they just looked at me like I had three heads.

  100. Re:Don't delete cookies... lock the http folder by davidsyes · · Score: 1

    I used to use my root account to lock my user account's /home/myusername/.kde/share/http/

    path so the even ***I*** could not edit the cookie folder on a whim. That is, unless I logged into root via the console. After a while, the system seemed to degrade, or maybe it was only that user account. I'd actually gotten accustomed to really shitty page refreshes, site visits and so on.

    But, I like to believe I have a malevolent opposition to most cookies. Now, I use Konqueror AND Firestarter blocking lists to keep cookies at bay. I also tend, now, to got to the /var/tmp/kdecache-username/http folder and selectively delete cookies.

    Recently, I read about Web Beacons and then realized I'd used to be concerned about them, but got sloppy or lazy. It seems that web beacons are 1x1 pixels/buttons that alert a sender of Http traffic/e-mail that a page or a message was viewed. Purportedly, it doesn't do anything else, but to me, a "beacon" can beacon to another beacon, and eventually, a crude form of tracker or even a keystroker could be in play.

    Am I paranoid? I don't think so. But, I still delete cookies, wholesale by lopping off the /http folder and issuing makedir http. KDE (I suppose it's KDE) recreates the single-letter folders, less w and a few others as they are needed. I look for and purge x10 stuff, doubleclick bullshit, and more.

    The problem I see, by us talking openly about this is that assholes in some cartel or lobbyist group will try to make it illegal to tamper with cookies since some laws require some businesses to "Know Thy Customer", or between mshaft, marketers, and others, we'll all be collectively screened and denied access to sites that actually need the ad revenues.

    Well, I don't mind some sites sending me a cookie. I just delete the bitch before I move on to another site. It's not just that you need to delete the cookies when closing the browser, or making sure the settings are set for "Make cookies session cookies". No, one cookie could be a beacon or bot or crawler, and by the time you shut down the browser, the b, b, or c has already done its job of relaying your movements, queries, and so on.

    If the bot-fiends pull a fast one and secret the cookies and bots and beacons and crawlers to places too difficult to cleans, then we need the Open Source and even Closed Source/proprietary browsers to log each and every action the browser and the subsystems calls sent so the user can malevolently hunt down and KILL those bbbcc's before moving on to another site or page within a site.

    I am sick and TIRED of hearing apologists or site admins say "We need the cookie to make sure you are who you claim to be, and to make sure you get the pages you asked for." Well, goddammit, set up session numerics that are in the BROWSER URL line, but don't sequester or secret them to my machine in some encrypted manner that obfuscates what you're UP TO. The only encrypted cookies I expect are from BANKS or merchants with whom I make a transaction or purchase. Any OTHER cookies are my own damn fault if I don't delete during or after a session. If someone steals my machine, or keystrokes it, they'll find out anyway if I don't delete the browser history, the /var/tmp/, the user account and more.

    I guess the next step will be for us all to have Read Only surfing machines to force cookies back where they (or almost all of them) belong: on the SITE SERVER, not the visiting client.

    If your site is good enough, people will come back again and again, until something else dominates their attention, which will almost ALWAYS be the case, with the exception of, say, the major portals of news and email.

    Oh, yeh, I realize that encrypted cookies might reduce the in-transit risk posed by MITM attacks, but many sites don't rise to the level of secrecy that demands encrypted cookies.

    Wow, another dictionary word anti-script image.

    --
    Previously: "Linux... Toward the Sunrise..." Now: "Linux... Toward the-- No, now, part of Every Sunrise"
  101. Re:Tracking customer behavior by SatanicPuppy · · Score: 3, Informative

    My ability to make up fake phone numbers is almost a brainstem response. I accidentally told a mortgage officer a fake phone number once, then had to do the lame, "Uhhh, wait that's my old number" thing.

    Whenever someone asks for info they don't need, lie. It's the only safe thing to do. I hit one of those surveys where they ask you for your computer password in exchange for a 5 dollar gift certificate.

    They said, "We'd like to offer you a free gift certificate for coffee in exchange for your password."

    And I said, "What a coincidence, my password is 'Il1k3fr33c0ff33'." I'm not sure they got it, but I got my fr33 c0ff33.

    --
    ad logicam Claiming a proposition is false because it was presented as the conclusion of a fallacious argument.
  102. Good, I say by Dracos · · Score: 1

    Cookies were not intended for the uses that internet marketers abuse them for. If my location bar says foo.com I don't want cookies for 10 other sites, and I don't need them--Only the marketers need them. They're just another way to annoy the user, without the user knowing about it until later, when the marketdroids can achieve the horror portrayed in Minority Report.

    If enough of the data pointed to by cookies in various tracking databases can be assembled, there's yet another avenue for identity theft, I bet.

    I've never seen a legitimate reason for cookies to persist more than a few months. Cookies that last until 2037 are just begging to be denied.

    Also, Spybot and AdAware both delete cookies from IE that are malware related. The people responsible for those can simply go f*ck themselves.

  103. Paranoia Haven by Anonymous Coward · · Score: 1, Informative

    I am a developer of site analytics software, and I make major decisions on the featureset and development, so I think I'm qualified to speak from this side of things.

    Most of the discussion I'm seeing is "let those dirty marketing bastards choke on this!" As if the sole purpose for using cookies is malicious and couldn't actually be beneficial to both sides.

    First off, if you really believe large coorporations are analyzing each of the individual millions of visitors they get each day to try to identify them personally, wringing their hands and laughing manicly in backrooms as they discuss all the ways to scam money out of you, you are a true paranoid and should seek counseling immediately. You would have to hire an entire staff who's sole purpose was to attempt to make personal connections between hundreds, thousands, even millions of tracked data and the real person, which is usually impossible, unless that visitor has registered with personal information to the site anyway, in which case the visitor obviously feels comfortable enough to let the company know who they are in the first place, and it doesn't really do that company any good to go through their specific records to see everything they did on the site... there's no benefit I can identify with doing that! It'd be EXTREMELY time consuming and probably wouldn't be effective.

    In cases with large coorporations it's impossible to find a valid reason to sift through each and every visitor to see what they did and how they could be exploited... utter rubbish! That data is used for looking at visitor trends IN GENERAL, to figure out what problems the site or campaign may have to make them better. This results in a better site UI so that people can find what they're looking for quickly and easily, as well as a better all around experience for the visitor (and MAYBE even lower prices). The data can be analysed for a product page, for example, to see how many people are browsing it and following through to purchase, and how many people are leaving. This could be an indication of the product's popularity vs the purchase ratio which could signify that the price needs to be lowered or that there is a UI problem with checkout.

    I don't know about you, but I purposefully leave my cookies turned on because I believe that in general they IMPROVE the web, not worsen it. There are ALWAYS going to be people trying to exploit everything technological, but they are the rare not the norm. By the same logic most of you are following, we should get rid of computers in general because people are using them for identity theft, fraud, and exploitation in general. Does that make sense?!

    Makes me mad when I see the posts by paranoid masses that follow this line of logic because it's just not well thought out. And I really don't like stupid people.

  104. Re:Tracking customer behavior by raile · · Score: 1

    I've always wondered if the most frequent customer is Jenny* for the stores that have this policy.

    * 867-5309 for the 80's impaired.

  105. Could the Title also be... by ehaggis · · Score: 1

    ...marketers lose their cookies
    or
    users toss their cookies.

    --
    One ring to bind them - should probably have more fiber and less rings in their diet.
  106. Re:Tracking customer behavior by jfengel · · Score: 1

    Sounds like an ill-trained cashier. They know they're not going to get 100% compliance, so "no" is usually a fine answer. I can't imagine why a minimum-wage clerk would be so persistent unless they were explicitly told that it was necessary.

    You'd have done the store a favor to mention this to the manager. If one clerk was misinformed they might all be. Customer tracking info isn't nearly enough to risk losing a sale. Ask once and take "no" for an answer.

  107. Trading grocery cards for fun and profit by Otto · · Score: 1

    It's actually quite a widespread thing. I forget where I initially heard it, but nowdays when I suggest it to people, they agree and understand why without me having to explain it, more often than not. :)

    If you go to any kind of internet gathering, get everybody there to swap theirs around. Get them to do it at other long distance gatherings. If anybody's watching the data, it will appear that people are moving across the country way more than normal. Completely shoots their data mining to hell too, if you can get enough people involved. So spread the word. :D

    --
    - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
    1. Re:Trading grocery cards for fun and profit by AuMatar · · Score: 1

      Anything that doesn't require real info (like credit cards) have been registered to B Gates at 666 Dis Lane for close to a decade now.

      (for those who don't get the joke- Dis is the main city in Hell in Dante's Inferno).

      --
      I still have more fans than freaks. WTF is wrong with you people?
    2. Re:Trading grocery cards for fun and profit by Anonymous Coward · · Score: 0

      That was a joke?

      Just don't quit your day job for a stand-up comedy gig. You just might starve, mmmm-kay?

  108. +5 Surreal by NickFortune · · Score: 1
    At any rate, I think leaving cookies on by default helps the situations more than it hurts it. So what if people use it to try and make a buck... the consumer ALWAYS has the right to 1. disable the passing of the information and 2. to not buy from any medium which requires them to reveal more information than they are willing.

    You seem to be saying that

    1. although sites will try and abuse data collected via cookies,
    2. it is in our best interests not to block or delete these cookies
    3. because we have the right to block them if we want (and therefore we shouldn't).
    4. and also because we don't have to buy anything from a site that wants more info than we're comfortable giving. Although presumably from 2) it remains in our best interest to give over the info.

    I feel sure I speak for a great many slashdotters when I say "You WHAT?"

    --
    Don't let THEM immanentize the Eschaton!
    1. Re:+5 Surreal by twifosp · · Score: 1
      I'm not sure how you arrived to those conclusions at all. No basically what I'm trying to say is that:

      Cookies aren't egrigious because the end user has the right and ability to turn them off.

      Cookies do help some of the time.

      And above all else: You can always choose not to visit, use or buy from a site whose practices you do not agree with.

      I guess my original post wasn't very well organized in that sense, but that's my point.

    2. Re:+5 Surreal by Otto · · Score: 1

      Cookies aren't egrigious because the end user has the right and ability to turn them off.

      Cookies do help some of the time.

      And above all else: You can always choose not to visit, use or buy from a site whose practices you do not agree with.


      I agree fully. That's why I delete all cookies at browser shutdown except for those in my whitelist. I have the right to turn them off (or delete them in my case), they do help some of the time (which is why I leave them on and just delete them after the fact, making them into session cookies, essentially), and I can choose not to visit (or allow persistent cookies from) sites whose practices I don't agree with (and whitelist those whose practices I do agree with). :)

      --
      - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
    3. Re:+5 Surreal by NickFortune · · Score: 1
      Cookies aren't egrigious because the end user has the right and ability to turn them off.

      Well, I don't think anyone is demanding they be outlawed. Just defending our right to block them.

      I'm not sure how you arrived to those conclusions at all.

      Well, it was the bit about

      At any rate, I think leaving cookies on by default helps the situations more than it hurts it
      This set me to thinking "how does the ability to turn off cookies make them less harmfull if we always leave them on".

      It seems a bit like saying "your best policy is to keep your mouth shut because, after all, you have the right to free speech".

      That's what I don't get.

      --
      Don't let THEM immanentize the Eschaton!
  109. Re:Tracking customer behavior by JUSTONEMORELATTE · · Score: 1

    Slightly different tack than "867-5309" but I always used to give 303-722-2713. At least in the 80s, that was a Denver, CO Dial-a-prayer line.

    Alternately, for a really good time, call 303-499-7111.

  110. Re:Tracking customer behavior by Anitra · · Score: 1

    I worked at Toys R Us about 5 years ago, and we had to type in a phone # before we could even start scanning items at the register.

    It was fine - we simply entered the store phone number or 555-555-5555 when someone said "no" (or if they had 3 screaming kids, etc.). Then some manager noticed how often this was happening, and cracked down on the cashiers - "We MUST have a phone number!" At this point, most cashiers began simply entering their home phones instead.

    I still think it's a stupid policy in general - they're trying to put you on a mailing list by reverse-matching your phone number to an address. Thankfully, my husband and I have cell-phones and no landline, so we tell that to any cashier who asks. I think I've only had one place ask again for the number once I've told them that.

    --

    Have you read the Moderation Guidelines Addendum?
  111. There is another trick, I think by what+about · · Score: 1

    I have a firewall (it is a bit complicated, there is a machine that does NAT and then there is my machine) that blocks everything that goes OUT of my machine beside selected applications. I also user Opera with disabled ActiveX (no flash then) and I have "Clear chookies on exit enabled".

    Only when I go to cnn.com there is a popup from the firewall telling me that some of core windows component wants to talk to DNS, I wonder what they are doing, why just CNN and not all the other web sites, there must be something oing on but windows does not tell me what is happening.

    Really, if someone wants "persistence" then have them login and store all useful information on the server, cookies should be deleted every time the browser is closed and NO profile of user should be done in any way.

  112. Expiration Date? by Bob+535604 · · Score: 2, Insightful

    Maybe if advertisers would stop setting ridiculous expiration dates. The thought that advertisers think they can have a small peice of my hard drive until 2069 sickens me.

    Mozilla (and firefox) makes it easy, set network.cookie.lifetimePolicy to 3 and then set network.cookie.lifetime.days to the maximum number of days a cookie can stay.

    I have mine set to 2, if I visit a site and don't come back within 2 days, I think it's safe I won't miss anything by having them remember me.

  113. Ads? by Otto · · Score: 1

    Where did advertising come into this? I wasn't speaking about ads at all. We're talking about cookies here, not adblocking.

    --
    - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
    1. Re:Ads? by phasm42 · · Score: 1
      However, unlike yourself, I also see that they probably do not have my best interests in mind when they are trying to "sell me stuff".
      Admittedly I got off on more of a tangent than I had intended, but you seemed concerned about cookies related to selling you stuff, which to me implied advertising.
      --
      "No one likes working in a hamster wheel, and your shop smells of cedar shavings from here." - TaleSpinner
  114. How to fix? by Oracle+of+Bandwidth · · Score: 1

    Ok, lets see... Persistent Identification Element, this is just flash cookies right? But how do we foil "Visitor Determination Methodology" We need a how to.

  115. Spending too much time around marketing execs by WebCowboy · · Score: 1

    ...can be potentially hazardous. When dealing with marketing folks you have to realise that, by nature, they are parasitic and selfish. In fact they are quite similar to lawyers (there are also far too many of them in the world than is needed). Marketers get caught up in the pursuit of "great Key Performance Indicators" and tend to lose sight (or never even cared about) offending the targets of their activities. The link to the (old and stale) Globe and Mail in this /. article is indicitave of that--the developers of the "new and improved" Flash-based session tracker talked about silently pushing more files onto surfers' machines, restoring their cookies without asking and making tracking files harder to find and remove as is it was a GOOD thing. It sounds like malware that spybot or anti-virus software should obliterate if you ask me!

    Please to not be offended if marketing is your profession--there are a few out there that earnestly do try to improve peoples' lives through their trade (just like those in law). The above is a comment on the industry in general.

    In any case since you seem to be more of a tech type than a marketer I wanted to comment on the technical aspects of your post in adition to making some philisophical opinions. A lot of what you were trying to perform could be done using a session variable passed through CGI (hidden input tags), or by using the "referrer" field in the HTTP header. You do not need to issue cookies or maintain states between multiple browsing sessions at all to track users anonymously for the purposes of analysing traffic and navigation pattterns on your site. Yes, you could still do "evil things" with these methods but at least it is limited to the one session and it doesn't intrude on a person's PC by writing persistent files to it that can be used for even more evil things.

    Also, if aggregate data is all you need, you do not need to establish a persistent session cookie either. You can get ALL the info in your examples WITHOUT cookies at all if you are truly only interested in aggregate data. You also make the argument that sure, with a bit of effort we COULD link cookie-sessions long term but you don't need to because "user 5233258" is just as useful as "John Smith". Why do you even need "user 5233258" or even "123.231.132.111" anyways?

    If you ever find yourself working on a project for marketing people you might want to try proposing a design that uses cookie-less methods (free of presistent data) to gather this sort of data. If one of them is savvy enough to notice you aren't using cookies anf that you should do so, or someone asks somehting along the lines of "can we keep sessions between visits" then ask a lot of "why" questions back. If you get a lot of push-back and weasel excuses it means they want to track personal data of customers. If they deny they'd ever want to do so after such talk they are LYING--they might not do it now or have specific plans to do so but I guarantee they are thinking that if they fill a bunch of database tables with it now they can link them together and make money off the info if they ever need to in the future.

    If you still get static, present the argument that cookies are anow almost useless to collect information for a single visitor to a site over time. Many people disable cookies. The flash alternative is dead already with the Mozilla plug-in to kill it. Even MSIE 7 will have stricter default security settings that will limit cookies' tracking abilities. The GNOME Epiphany browser is also coming out with a feature that could catch on with more well-known browsers: An easy-to-set "privacy mode" that automatically scrubs all cookies, history and cache and any other traceable items every time you close the browser. You could even permanently make it the default mode if you wanted. So much for cookies being any more effective than CGI session variables!

    I don't think marketing products in and of itself is evil, just that the industry doing it nowadays is.

  116. Re:Tracking customer behavior by Anonymous Coward · · Score: 0

    I used to think this too.

    Then they started sending me 10% off coupons for crap I *WANT*.

    Hey that is kind of cool!

    Email they do not get. I know EXACTLY what they are doing with that, and no I do not want them selling it to someone else I could care less about.

    'I do not have email, sorry'.

  117. Spyware and Image Cookies by yintercept · · Score: 3, Interesting

    I use cookies for session management and tracking usage in a site.

    Spyware abuse generally occurs when a big company (doubleclick, valueclick, etc) want to track your usage between sites. The spyware fears generally arise with third party cookies.

    These cookies generally come attached to images. For example the image ad on top of this slashdot page might access cookies that get used to build a profile of my slashdot usage.

    Preventing spyware is a matter of blocking third party cookies.

    Personally, I can't see any real reason why images (the IMG tag) should be allowed to set cookies.

    When the main page sets a cookie, it is almost always to provide service to the end user. When an image sets a cookie, it is almost always so marketers can build profiles. My ideal browser would not allow third party cookies nor would it allow cookies to be set by img tags.

    1. Re:Spyware and Image Cookies by Anonymous Coward · · Score: 0

      The image tag doesn't set cookies. The HTTP headers tell the browser to set the cookie. The HTTP header just happens to occur before the image content is sent.

  118. Know thy customers wallet. by Anonymous Coward · · Score: 0

    "But I will absolutely not abide you treating me as a "profile" and charging me more than you have to because you think you can get away with it based on what you know about me. That's just exploiting your data collection and trying to screw me over. No thanks."

    Nvidia professional cards.

    Nvidia bargain cards.
    ---
    Name-brand groceries.

    Generic groceries.
    ---
    Tap-water

    Bottled water.

  119. Built in session tracking by squoozer · · Score: 2, Interesting

    I have often wondered why there isn't a push for browsers to support real grown up session tracking that is properly user configurable. Session tracking is something that has to be done so frequently I'm amazed someone has come up with a better solution.

    At it's simplest session tracking could be implimented as a cookie that contains a fragment of XML (or maybe just formatted text if you're alergic to XML) which gives various pieces of information identifying the site.

    To ensure that it's all above board make sure that the session identifier is digitally signed. By default the browser would be set to accept session requests (as happens now) but could query a repository of "abusers" and block certain sessions (much like email black lists only more effective because it's digitially signed).

    Since this system only does one little thing it should be easy to implement and you could probably turn off other cookies.

    Anyway just thought you might like to kick that idea about a bit and see how it fits.

    --
    I used to have a better sig but it broke.
    1. Re:Built in session tracking by Anonymous Coward · · Score: 0

      All that is needed for session tracking is that the server hand the client a session id which the client keeps sending back over the lifetime of the session. The server keeps track of everything specific to the session.

      With a cookie, this only requires "sessionid=239442" with no date. Or you can stick it onto the the URL (e.g., "..?sessionid=03233"), or put it into a hidden input field (e.g., <input type="hidden" name="sessionid" value="012309342">) in a form.

      If security is an issue, you should be using https, of course.

  120. Store Clerk vs. Web Admin by electrosoccertux · · Score: 1

    I don't have a problem with the store clerk monitoring what brands I check out, spend time at; what isle's I spend most of my time in. The reason that I don't care is because I can check out the store clerk, find out what he's doing, where he's spending his time, when he's watching me.

    Not so with web admins. Don't know what they're doing, where they're looking, when they're watching. The argument isn't "Why do you, the user, not want them, the admins, to know this stuff [through cookies]?" It's "Why do they have a right to obtain that information from me? Why should they have that priviledge?" When its something to do with me, assuming they have the right and then asking why I don't want that is nonsense. I have the right to tell them I don't want them monitoring me, they need to provide me with an adequate reason and option for why they deserve that info.

    I don't care if its going to make my browsing experience better, they can collect that from those who don't care about their privacy.

    Sure its nit picking now, but it can only get worse as corporations seek more control...and this is one of the ways they do it.

    I don't see any reason to even allow them that liberty, since that liberty won't directly benefit me in a way I care about and it can only, from my perspective, become a control mechanism.

    1. Re:Store Clerk vs. Web Admin by lukewarmfusion · · Score: 2, Insightful

      If you don't want to be monitored in a store, you have no recourse but to not go there.

      The same goes for the website you visit.

      It's not a privilege to collect your data, it's a necessary part of sending you the information you've requested. Your HTTP request contains plenty of valuable data that you claim infringes on your privacy. Though I'm a privacy nut myself, I think your complaints go too far.

      You can either accept the logging/tracking/analysis or you can stop using the web. It's pretty simple.

    2. Re:Store Clerk vs. Web Admin by maxpublic · · Score: 1

      The same goes for the website you visit.

      And

      You can either accept the logging/tracking/analysis or you can stop using the web

      You've managed to generalize the behavior of specific web sites to the entire web in one fell stroke. Nice trick, that.

      Max

      --
      My god carries a hammer. Your god died nailed to a tree. Any questions?
    3. Re:Store Clerk vs. Web Admin by Anonymous Coward · · Score: 0

      I'm sorry, you must be an idiot. Moreover, you must have been waiting for months to bust that out on /..

      The point is, it's hard to know. So your best bet is really to just get off the internet so we can all stop wasting our time on stories like these winding up on the front page.

    4. Re:Store Clerk vs. Web Admin by maxpublic · · Score: 1

      The point is, it's hard to know. So your best bet is really to just get off the internet so we can all stop wasting our time on stories like these winding up on the front page.

      No, the best bet would be for us to do whatever the fuck we want with our browsers - including refusing cookies or tossing them out when the session ends. End of discussion. I mean, really - what're going to do about it? Tell us to get off "the web" again? Oooh, I'm impressed!

      Max

      --
      My god carries a hammer. Your god died nailed to a tree. Any questions?
    5. Re:Store Clerk vs. Web Admin by lukewarmfusion · · Score: 1

      The parent appeared to take issue with webmasters collecting information in any form, not just by way of cookie-based tracking. Since your HTTP request is unavoidable and contains information to collect, you simply cannot visit any website without sending some information. If the collection/analysis of that info is a problem for someone, they can stop using the web because it's part of using the web.

      Cookie tracking is an additional technique for data collection. While useful in some instances, I don't think it's that much more privacy-infringing than traditional logs.

      If we're just talking websites with the cookie tracking, you have an excellent point.

  121. Ummm... Yes, that's correct? by Otto · · Score: 1

    Most likely what you should be looking for is a feature not to disable cookies entirely, but only to allow
    a) session-duration cookies ONLY, or
    b) cookies associated with websites that don't collect personal information.


    You need to re-read what I said. Your a) is basically exactly what I do. All persistent cookies become session cookies unless I whitelist your site.

    --
    - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
  122. Re:Tracking customer behavior by sowth · · Score: 1

    Why not give them the goatse.cx guy's phone number? It would be much more pleasing knowing soon their computer is going to be filled with "interesting" pictures.

  123. Re:Tracking customer behavior by houghi · · Score: 1

    Cashier: May I have your phone number?

    I don't HAVE a phone, you incensitive clod.

    --
    Don't fight for your country, if your country does not fight for you.
  124. The other side of the mirror. by Anonymous Coward · · Score: 0

    There's one other way, but I doubt most will immediately think of it.*

    *Here's a book for those who like this kind of thinking. Blink: The power of thinking without thinking.

  125. Re:Tracking customer behavior by dgos78 · · Score: 0

    I'm not sure about now, but it used to be that phone numbers with the prefix of 976 were generally pay sex lines, at least here in Atlanta. So I give them 404-976-(whatever nasty four letter word I feel like at the time).

    --
    SYS 64738
  126. Re:Tracking customer behavior by Anonymous Coward · · Score: 0

    That's the combination to my luggage!

  127. Re:Tracking customer behavior by Joe+the+Lesser · · Score: 1

    Of course, nowadays both stores were probably owned by a parent mega-corp of a different name...

    --
    "I only speak the truth"
    Karma: null(Mostly affected by an unassigned variable)
  128. Bad offender: Best Buy by Otto · · Score: 1

    I don't mind when they ask for my zip code. Using a credit card will require that sometimes. However, the last time I went to them for some gear (and it will be the *last* time), they asked me for:
    -Zip
    -Phone number
    -If I wanted a free fucking magazine subscription
    -something else

    I don't know what the last thing was because at that point I dropped the shit on the counter and walked out the door.

    Never again will I return there.

    --
    - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
  129. Obnoxious marketing may kill the Internet by Animats · · Score: 1
    Remember CB? "Citizen's Band?". Talk for free to anybody within a few miles?

    Where is it now? Unless you drive a big rig, you probably don't have one. This may happen to the Internet.

    Internet usage may already have peaked. AOL peaked a while back, having finally run out of suckers. A few reports indicate that overall time online has peaked. It's hard to tell; broadband "online time" reports often include idle computers.

    The combination of viruses, worms, spam, popups, scams, and ads hardly makes it worth it any more.

  130. Re:Tracking customer behavior by jfengel · · Score: 1

    There's a reason Toys R Us is perilously close to bankruptcy. Annoying their customers has got to be part of it.

  131. ahhh, poor marketers, whaaaaaaaaaa by v3xt0r · · Score: 0

    they need a good dose of stfu!

    I don't want cookies on my pc that let people know things about my web browsing habits, not because I have something to hide, and not because I think of it as 'spywarez', but simply because I do not agree with the tactics used by marketing research agencies, such as the ones these poor whiney capitalistic-minded cut-throat sharks represent.

    Advertisers shove stuff in your face all over TV, billboards, bus stops, movie previews, and now the internet.

    The 'Premium Content' internet advertising business model is a little bit more of a friendly approach to advertising, from a users perspective, but from a marketing perspective, being friendly (or considering the views of the consumer) isn't an option worth considering, to them.

    --
    the only permanence in existence, is the impermanence of existence.
  132. Spoken like a true web-marketer... by quarkscat · · Score: 1

    Cookies are not, in and of themselves, evil. Or, at least, that isn't the way the cookie began life on the web. But having cookies enabled also invites spyware -- every time I leave cookies on in my browser for a couple of hours, I can scan/find/delete at least half a dozen cookies that are identified as spyware. And some of that is downright malicious.

    If website builders and/or administrators insist on spreading spyware for fun and profit, then I say "fsck 'em all!"

  133. Re:Session-based analysis by symbolic · · Score: 1

    While it might definitely be worthwhile to tell if people are coming BACK to your site, it would also be very valuable to look at individual sessions, and devise some more generalized conclusions from that. If you see a lot of sesions where the home page and maybe one other page are accessed (with no purchase), it's a sure bet you've got a problem. On the other hand, it would seem that if you have someone who navigates quickly to the catalog, selects and purchases an item, it could very well be a repeat customer.

    I'm not sure that long-term data is that important (that require persistent cookies or other explicit ways of identifying individual users)...there seems to be a lot you can understand just by looking at what transpired during each session.

  134. Re: SESSION BEANS USE COOKIES!!! by Anonymous Coward · · Score: 0

    Java Session Beans use cookies. It drops one value. 'JSESSIONID'. That is then used to identify the session bean stored in memory on the server.

    All this work that you did to avoid storing data in a cookie worked because the java session automatically set a cookie for you, and tried to enforce best practices.

    eg.
    1. cookie only stored session identifier
    2. cookie is not persisitent and disappears on exit

  135. Re:Tracking customer behavior by hawkeyeMI · · Score: 2, Funny

    Why do you have your friend's ex-wife's number? Or maybe that's why she's his ex-wife.

    --
    Error 404 - Sig Not Found
  136. Re:Tracking customer behavior by Reignking · · Score: 1

    Annoying their customers has got to be part of it.

    Wal-Mart is the main reason, though.

    --
    One man's Funny is another man's Offtopic.
  137. Out of curiousity... by phorm · · Score: 1

    Does anyone actually do this? Who was the survey for?

    1. Re:Out of curiousity... by SatanicPuppy · · Score: 1

      Yea actually. Turns out it was Verisign. It was in San Fran a few months ago. I was there for a certification course...and free coffee! Mmmmm.

      It was funny. I asked a guy who answered the question about the same time I did, "Did you give them your real password"

      And he said, "Sure, but they didn't ask for the username, so whats the harm?"

      I said, "So what's your name? Your name name, not your username."

      And he said (can't remember...mike something), to which I said quickly, "So your username is msomething, right?"

      The expression on his face was priceless. A lot of people just fundamentally don't get security. My wife and I work in the same place, and she's forever losing her id and asking to borrow mine.

      I always say, "Your badge opens ONE door, mine opens ALL doors."

      And she replies, "What does that matter if I only go in the one door?"

      Oy vey.

      --
      ad logicam Claiming a proposition is false because it was presented as the conclusion of a fallacious argument.
  138. Re:Tracking customer behavior by Just+Some+Guy · · Score: 3, Funny

    Found it on the bathroom wall. It's common knowledge in these parts.

    --
    Dewey, what part of this looks like authorities should be involved?
  139. New tracking technology by trewornan · · Score: 1

    I tried to look up this new tracking system from United Virtualities but couldn't find much about it. This site says that it is "tied to the browser" which makes me hopeful that this will only affect IE users, but does anybody know any more about it?

    1. Re:New tracking technology by Anonymous Coward · · Score: 0

      They use Flash based cookies which are seperate from browser cookies. Recent versions of Flash allow a site to store data on your hard drive much like a cookie and was intended to allow Flash based games to save your progress but is now being used by advertisers.

    2. Re:New tracking technology by antispam_ben · · Score: 1

      Quoting That site:
      United Virtualities announced it has developed Persistent Identification Element (PIE), a backup ID system that will restore erased cookies.

      This flash-based tracking technology was discussed here:
      http://yro.slashdot.org/article.pl?sid=05/04/04/17 7238&tid=95&tid=158

      --
      Tag lost or not installed.
  140. Re:Tracking customer behavior by Anonymous Coward · · Score: 0

    is it really worth wasting your time to prove a point? i would rather waste _their_ time by providing a fake telephone number or zip code. it's not like the kid behind the register is gonna recognize the phone number and zip code of the White House.

  141. Re:Tracking customer behavior by jjoyce · · Score: 1

    Yes, this is what they were laughing about!

  142. Edit-Prefs-Priv&Sec-Cookies-Block by billstewart · · Score: 1
    If you're using Mozilla, it's about four obvious menu steps deep, click the little radio button, and your job here is done. (Actually it's not quite done, because there will probably be sites where you do want the cookie - so use Tools->CookieManager->whatever.) Firefox probably has a slightly different menu chain, but it'll still be pretty obvious.

    And stop being a simpering government-needs-to-help-me whiner. Spam shows up because spammers can guess your email address, but cookies only arrive when your browser asks for them. The nice friendly web page says "Hey, kid, wanna cookie?" and you're supposed to say nothing, like your momma told you, not answer "Oooooohhhh, cookies!".

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  143. let them worry by maxpublic · · Score: 1

    Their concerns aren't my concerns. If their business model has some holes in it, it isn't my job to help plug 'em. I don't give a shit about their "worries", nor am I obligated in any way, shape or form to help them on the road to profit.

    My computer is my own. If I say you can't install a cookie on my browser then you don't get to install a cookie on my browser. It doesn't matter WHAT the cookie does; the only thing that matters is that I've said "it's my property, and I'm tell you to fuck off. So fuck off already." The fact that you may not like that *doesn't matter for shit*.

    Max

    --
    My god carries a hammer. Your god died nailed to a tree. Any questions?
  144. If they did what they said they would do . . . by taustin · · Score: 2, Insightful

    It wouldn't be so bad.

    In theory, having cookies to track where you go and what you do is a good thing. It allows marketers to target ads at you for stuff you are actually interested in. If they actually did that.

    Unfortunately, they don't. They use it to bombard you with constant, endless ads for "related stuff", to the point where you can't actually see the content on the web page you want to read.

    Or they decide that looking at Corvette pictures means you think your penis is too small, and therefore "natural male enhancement" is a "related product."

    To hell with 'em all.

    1. Re:If they did what they said they would do . . . by radja · · Score: 1

      >In theory, having cookies to track where you go and what you do is a good thing. It allows marketers to target ads at you for stuff you are actually interested in.

      what's the good thing about that? there are NO ads i'm interested in. if I'm interested, I will ask. otherwise, keep your annoying shit out of my face. non-permission based marketing is evil.

      --

      No one can understand the truth until he drinks of coffee's frothy goodness.
      --Sheikh Abd-Al-Kadir, 1587
  145. But no one cares about you... by aprilsound · · Score: 1
    Almost everyone on /. should agree that companies do not care about individuals, there's no money in knowing the path that John Smith took through cozypetmufflers.com.

    If you fit a particular profile, they might use cookies to make custom recommendations or deliver targeted advertising, but not much else.

    Oh no! Slightly more relevant ads! I might actually see an ad for something I want!

    Someone will bring up the idea that they might match your personal info to browsing habits, to which I can only say: If you were dumb enough to give you real name to Doubleclick or some other pervasive advertiser, you're boned. Good luck.

    For the rest of us, cookies allow reasonably secure login and saved preferences over an indefinite time period. If you're too worried that double click cares about how much pr0n you personally, not as part of a demographic, look at, then turn off cookies. Personally, I don't see how my erratic behavior on the few sites that I trust with personal information can lead to anything bad.

  146. Amen Brother by gadlaw · · Score: 1

    That's one of my pet peeves. Best Buy is good for that. Radio Shack used to do that. Makes me a very angry customer - who finds some other place to buy what I want.

    --
    Enjoy your Karma, after all you earned it. Feel your Karma Joe, feel it burn.
    1. Re:Amen Brother by chadjg · · Score: 1

      Me too. At Radio Shack I just give them a polite "No Thanks." If the sales droid persists, I just stare at them and say nothing until they move the sale along. I have a beard, I'm fat and slightly odd looking, so it gets the point across without a lot of fuss. This doesn't happen much anymore, I think the store has gotten the point or changed policy.

      --
      Why do I have this? I don't smoke.
  147. Please stop the cookiephobia by scode · · Score: 4, Informative

    Alright, fine. Some types of cookies can be easily exploited, but there is one type of cookie that you DON'T want to turn off (and don't want people in general to turn off), and that is the session cookie.

    All this 'anti cookie' propaganda is really getting out of hand. Session cookies are a great way to securely identify a series of otherwise unrelated requests as belonging to the same session. By turning off cookies one is also disabling this very valuable feature.

    "But it doesn't matter" you say, because web sites can use URL rewriting instead. Well, think about it:

    * If URL rewriting is used, exactly how is this better, from a privacy stand-point, than a session cookie? The exact same information is propagated, so nothing is gained in terms of privacy. In addition, the "evil" people whom everybody is presumably trying to prevent from tracking a user's session can also use this technique.

    * On the issue of security and technical convenience however, you are making it worse. URL rewriting is inherently less secure in the fact of 'accidents' such as paste:ing a link (which the average joe won't understand contains sensitive information) to a work collegue sitting behind the same NAT:ing gateway. And how about referrer URL:s making it into web server logs? (There is no guarantee that the session identifier is encoded such that a security conscious browser can spot it, and refrain from sending it as part of a referrer URL to another web server.)

    Overall, session cookies are vastly superior to URL rewriting in a number of different situations. But this overzealous anti-cookie paranoia is forcing people to use URL rewriting *anyway*. In tryng to increase privacy, it has actually been lessend - along with security!

    Just to give one example of how the ACP (anti cookie paranoia) can interact with web pages: I was recently involved in a situation where some browsers would disable cookies (even session cookies) for requests that were made as part of an IFRAME on a page hosted on another domain (presumably for privacy concerns). This resulted in, for practical purposes, a total inability to use cookies on that site. URL rewriting is now used instead, to a detriment of security and privacy.

    --
    / Peter Schuller
    --
    peter.schuller@infidyne.com
    http://www.scode.org
  148. I have read every single one of these comments by Anonymous Coward · · Score: 0

    And now I somehow have an insatiable desire to rip into a 1 pound box of Nilla wafers.

  149. Tin Foil Hat by TheBillGates · · Score: 1

    I don't worry about cookies. Almost 100% of the sites I visit use them to indicate which forum posts I have read or to identify myself so I don't have to repeatedly provide my credentials.

    I've been surfing the net since 1994 and have not had my identity stolen or seen adverse affects due to accepting cookies. Those who worry so much about cookies are wearing tin foil hats. If you are so worried about cookies use an anomymozing service. Myself, I'll let the cookies continue to help my surfing experience and leave the tin foil hats to the nervous virgins.

    If you are visiting porn sites and are worried about your privacy, well by all means block cookies. But when you visit legitimate sites you visits on a daily basis accept the cookies that are designed to help you. I use a different browser for those Pr0n sites and I do block cookies on those. For the sites I visit daily, I use my normal browser and accept cookies.

  150. Slight clarification by scode · · Score: 2, Informative

    I should clarify the example at the end: I am absolutely not saying that cookies should cross domain borders; the set of cookies for the 'parent site' and the 'child site' would remain orthogonal - but not *DISABLED*.

    --
    / Peter Schuller
    --
    peter.schuller@infidyne.com
    http://www.scode.org
  151. Cookies + HTTP-REFERER = Unintended Consequences by billstewart · · Score: 2, Informative
    • Cookies weren't thought out in much detail when the spec was designed, and as you say they were mainly intended to make it easier to maintain state (as opposed to building ugly URLs to encode the state in.)
    • HTTP-REFERER lets an HTTP request indicate what page linked to the one you're requesting now. That means that a request for a banner ad contains the URL for the page that had the ad on it, so the banner ad company can track what page the ad was on. This not only wasn't thought out well, it wasn't even spelled correctly.
    • The two of them together are much worse. Browsers are only supposed to respond to cookie requests when the requesting web page is in the same domain as the cookie being requested. But HTTP-REFERER means that the advertiser's web page can be in banner-advertiser-example.com and still know that the main web page is in content-provider-example.com, and it can request a cookie that was left behind when other-content-provider.com's web page used a banner from banner-advertiser-example.com, because the banner advertiser is in the same domain even though the two web pages aren't.
    • That's nasty and annoying.
    • There are other ways advertisers can get some of the same information - instead of cookies, they can track by IP addresses, though that's obviously much less useful when ISPs do web caching or workers' PCs are behind company proxy firewalls, and banner-ads can also be built with ugly URLs as a substitute for HTTP-REFERER (e.g. http://banner-advertiser-example.com/ads/content-p rovider-3.jpg.) And advertisers will do many of these things when they can't get the cookies and referer data they'd like, but it's a start.
    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  152. Yawn by oldgeezer1954 · · Score: 1

    Why delete them. I don't accept them except for 6 different sites. Works for me.

  153. Apache Default Cookie Behaviour - Bad! by billstewart · · Score: 1
    You could have used other mechanisms instead of cookies, e.g. building up complex URLs to maintain state, but for applications like shopping carts, cookies really are fairly effective - it's the kind of thing they were intended for.

    What annoys me is the number of people who collect cookies for no good reason at all, specifically Apache users who collect an "Apache" cookie because that seems to be the default behaviour and they're too lazy to turn it off. And many of them are the same sorts of people who bitch about the privacy invasion from all these cookies.

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  154. Cookies do track you... by rmdyer · · Score: 1

    Cookies don't track which sites you go to.

    What world are you living in? Did you read...

    http://www.eff.org/Privacy/eff_privacy_top_12.html

    "However, some companies that manage online banner advertising are, in essence, cookie sharing rings. They can track which pages you load, which ads you click on, etc., and share this information with all of their client Web sites (who may number in the hundreds, even thousands.) Some examples of these cookie sharing rings are DoubleClick, AdCast and LinkExchange. For a demonstration of how they work, see: http://privacy.net/track/"

  155. Re:Tracking customer behavior by jayloden · · Score: 4, Insightful
    Look, I appreciate the sentiment - I don't like handing out my phone number or personal information for stupid reasons either.

    However, PLEASE try and remember something. The people you talk to and buy things from are not the store owners. In fact, they're lucky if they've ever even met the franchise owner of the store, let alone the owner of the company.

    You are taking out your annoyance on someone who has: a) No real interest whatsoever in whether or not you buy X piece of crap (unless they get commissions on sales) and b) No control over the policy, the system, and in most cases, the cash register either. They might be able to get around it (as the clerk did in the OP's post), but that's not the point

    The point I'm making here is this: don't get pissed at some clerk or manager at a chain store for following store policy, or expect them to change it for you, even if it's a dumb policy.

    I've worked at department stores and grocery stores, etc - it sucks. And you know what? The only people I ever really disliked when I worked any retail job were the people who thought it was MY store and MY decision to harass them for a phone number/address, whatever. These are the people that expect you to break the rules for them (c'mon, you can just give me the discount, I forgot my coupons), then treat you like shit when you follow the rules of the company that puts the paycheck in your hand at the end of the week.

    It was store policy to ask for a phone number, the register prompted for it, and we're supposed to ask. If we got shopped by a "secret shopper" or a manager caught us ignoring it, that's our ass, not the customer's. On behalf of all past, present and future retail employees: We don't care what your personal information is. We care about our paycheck and about following the rules of the job.

    I agree that it should only take one polite refusal to avoid having to give out your information. Just keep in mind that the manager may have to give approval, and in the larger chains, even the manager may not have the power to negate store policy. Either way, the bottom line is even if the manager has the ability to counteract the policy, they don't care. The manager at Best Buy is not sitting at home in a deep depression because you bought your printer at Circuit City instead.

  156. Simple: because cookies are complicated by typical · · Score: 1

    The only time they can get this information is if a third party has an Ad, or some other content on both sites (which is what makes cookies from ad sites more dangerous).

    And I don't know which sites do this. Nor do I want to worry about it, nor do I want to worry about leaking a single bit of information. I want to be as close to an anonymous ghost browsing past everything as I can.

    You know why customers don't like cookies? Because cookies take away a certain amount of their privacy. This has some value, both to the customer, and to the advertiser.

    Now, sometimes a vendor can make a very fair, clear offer, where I know exactly what I'm giving away. The best example I can think of is grocery stores. They give me a discount that's probably about 5% on average, depending upon what I buy, and I give them a complete log of everything I buy. Each time I give them information, it is voluntary -- if I choose to buy something with cash and not use my store card on a given purchase, I have that ability.

    Many people find that their personal information is worth more to the vendor than it is to them, and so sell it.

    On the other hand, when I turn on cookies, I have *no idea* what information websites are able to compile. There's always a new, clever trick to take advantage of some new, ill-advised system that browser developers have added. Once upon a time, it was associating email addresses with cookies by having links to FTP sites for images and using the tendency of browsers (once benign and safe) to provide the user's email address as a password. Yesterday it was ad banners being used to combine multiple sources of identity accross sites. Who knows what it will be tomorrow? Why should I worry about it, when I can just turn off cookies, except for a whitelist?

    Plus, once information is leaked, it's leaked forever; information wants to be free. Once Doubleclick can associate my Slashdot ID with my Freshmeat ID, they can associate my Freshmeat ID with my Democratic Underground ID, which they can associate with my UnderageLesbianGoatPorn.Com ID. And all those associations are going to stick with me for a lifetime in some database. Maybe it'll come to haunt me, maybe it won't. It'd sure be valuable to a political opponent if I decide to run for the Senate in twenty years. What about knowing that I'm the same guy that is constantly Googling for AIDs information? A health insurer would definitely like to have a potential red flag on me ahead of time; that's valuable information.

    So, yes, cookies can be useful. But they represent a deal being made between the browser user and the website producer in which the browser user has no idea what exactly they are giving up. There have been some attempts to remedy this (such as via P3P), but nothing really dealt with it.

    When it comes down to it, I don't really care whether it's easier or not for a website producer to require cookies. I don't care whether they can only make an IE-compatible site, either; I'll just go to a different site that can meet my requirements more.

    Spyware wiping tools for Windows may not be a great solution, but they represent a huge backlash -- people are tired of computers representing some huge, complex black box that can be influenced by a vast number of people intent on siphoning away their privacy. Those people are getting quite irritated now. Privacy policies are not the answer -- I can't read the privacy policy of every website I go to, nor can I reasonably verify that the website is following the policy, and in any event, most have a clause stating that the policy may change at any time without warning. There's only one way that I can ensure that you aren't invading my privacy, and that's to make it damn hard for you to even get the information necessary to do so.

    I'm fairly generous. I *do* allow cookies, but only on a per-session basis. Given the increasing amount of demand people have for no-cookies sites, I'm hoping that I can move to a whitelist-based system without too much pain soon.

    --
    Any program relying on (nontrivial) preemptive multithreading will be buggy.
  157. Re:Tracking customer behavior by zakezuke · · Score: 1

    However, PLEASE try and remember something. The people you talk to and buy things from are not the store owners. In fact, they're lucky if they've ever even met the franchise owner of the store, let alone the owner of the company.

    In an ideal world, employees would discover what policies are blatently offencive to customers and rather than deal with a bad situation they would leave.

    But unfortunatly no one needs morality when there isn't enough to eat.

    --
    There is no sanctuary. There is no sanctuary. SHUT UP! There is no shut up. There is no shut up.
  158. Re:Tracking customer behavior by typical · · Score: 1

    Of course, nowadays both stores were probably owned by a parent mega-corp of a different name...

    And if non-invasive company makes more money than invasive company, said mega-corp has some interesting data to play with.

    --
    Any program relying on (nontrivial) preemptive multithreading will be buggy.
  159. Consumers have only themselves to blame by Anonymous Coward · · Score: 1, Interesting

    The pattern is that people spend (a lot of) money on products sold through phone calls, TV commercials, pop-ups, Flash, cookies, spam, etc.
    Marketers wouldn't spend money on those things if they didn't bring in enough sales to make them worthwhile.

  160. It's pretty easy to track users by Anonymous Coward · · Score: 0

    Just look at the web log. Saw a processing tool (http://polliwog.sourceforge.net/ that will let you see what a visitor has been looking at. With or without cookies. Doesn't track you on subsequent visits though, so slightly less evil.

  161. Its simple by apathyandcheese · · Score: 1

    I know where to get the things I need (food, medicine, etc.). If I decide that buying something that is unnecessary (fun), I can find it on my own. How do I do it? The large and mysterious world known as the Internet provides all that I need. If I want a game, I'll look on a gaming site. If I want to buy a gift for someone I can look on Amazon or eBay. If I want music, I can look on iTunes (or use some other site, or even go to an actual store).

    I do not need to know that I can win a free iPod if I shoot a duck. I do not need to know that I can win a PSP by shooting one. I do not need to know how to increase my erectile quality. I do not need to know how to lose weight with a magic super-pill. I do not need to know that I can increase my height with a pill (instantaneously too, the guy was wearing the same clothes the whole time and seemed to stretch more than grow).

    I'm sure there are honest people out there, but they are basically needles in a pile of flashing popups informing me that my computer may be infected with spyware. Some of you may like a product you see on the internet, or would like to encourage honest marketers to continue advertising on the internet, but the rest of us who despise advertising should be free to do what we can to prevent them from making us see their ad. If it means disabling 3rd party cookies, thus creating skewed results for marketers, then so much the better. We aren't going to buy the product, no matter how much they beg. If it's a really good deal, I'll hear about it on a message board (for those of you who dislike it when people use absolutes without considering all possibilities).

  162. Re:Tracking customer behavior by Migraineman · · Score: 4, Interesting

    Like it or not, the cashier represents the store during the sale. During my experience at the store, I probably have the most "face time" with the cashier, and checking out ends up being the part of the sale that tends to stick in my mind. I want it to be pleasant and hassle free.

    Asking for personal information will get you a polite but terse "no." I have no intention of justifying my response to you or anyone else. Pressing the matter restults in me getting annoyed. Pressing *again* puts you in risk of losing the sale, and yes, I'm going to tell the manager why. I recognize that the cashier doesn't set the store policy. I don't think I've ever yelled at a cashier for that very reason. However, unless the store management hears about the cheesed customers and the lost sales, the store policy won't change.

    I vote with my wallet and my feet. Yelling and screaming just gets you written-off as a whackjob. Telling the manager why you're taking your business elsewhere, and then doing so, punishes the crummy vendor and rewards the competitor who doesn't have the crappy policy.

  163. Re:Schenectady by Migraineman · · Score: 1

    Yep, the only reason I know where zip 12345 is ... filling out online registration forms. You can usually put whatever crap into the address fields, but most folks have gotten smart enough to cross-check the city, state, zip combo before accepting the form.

  164. EPIC Page on Flash Cookies by Anonymous Coward · · Score: 1, Informative

    EPIC has a page on "Flash Cookies" online at http://epic.org/privacy/cookies/flash.html

    It argues that the direct marketing company is overstating the capabilities of the Flash Cookie.

  165. Blue guy disagrees. by imthesponge · · Score: 1

    cookie no lose effectiveness! cookie always give cookie monster good buzz.

  166. Best Buy by Cutting_Crew · · Score: 1

    TWO things i am sick to my stomch over is everytime i want to buy something and go up there they:

    1: ask for my phone number
    2: would like to try xxx magazine today etc etc..

    i am like NOOOOOOOOOOOOO!!

  167. Re:Tracking customer behavior by jayloden · · Score: 2, Interesting
    I vote with my wallet and my feet. Yelling and screaming just gets you written-off as a whackjob. Telling the manager why you're taking your business elsewhere, and then doing so, punishes the crummy vendor and rewards the competitor who doesn't have the crappy policy.

    Unfortunately, that has the same problem as I was discussing in my original post - the store manager doesn't care either, in most cases. The store manager in a major chain gets paid a few dollars more an hour than the cashier, has a lot more rules and some more resonsibilities, maybe even a set of 'manager keys'.

    What he STILL doesn't have, is a stake in the business. If you leave and go elsewhere to make a purchase, so what? Yeah, it loses the store money, but as a store/shift/dept manager, he'll still get paid, and the odds are extremely slim that it will affect him in any meaningful way.

    I'm not saying it's totally pointless, but don't kid yourself into thinking you're putting the hurt on the store and they're going to feel bad about it.

  168. Re:Tracking customer behavior by Jasin+Natael · · Score: 1

    Retail Employees don't even enter into the equation. You are educated by the corporation, instructed by the corporation, and acting as an agent thereof. When you have a conversation with a customer, you are basically a proxy for the company.

    People who behave like the grandparent poster are doing society a service. Losing sales (or public protest! as if!) is the only message that we, as individuals, can send back to the company after hearing a trained-parrot spiel on company policy. In great enough numbers, people can reward the good companies and punish the bad ones. I'll state this again from the opposite direction: don't mistake the store manager for someone who can affect change. If they even ask for your phone number, you have every right in the world to walk away. Don't trouble a manager over it, because you're not helping anyone.

    It seems like not enough people today understand their rights and responsibilities in a capitalist society. That's why we have so many of the deplorable, sheepish kind of consumer and too few empowered ones. If capitalism is going to work for us, just like democracy, people have to care enough to vote.

    Jasin Natael
    --
    True science means that when you re-evaluate the evidence, you re-evaluate your faith.
  169. Re:Tracking customer behavior by Migraineman · · Score: 1

    I hear ya. And no, I don't expect anyone from the store (especially the bigger ones) to come pleading for me to bring my business back. However a lot of retailers realize that folks are better connected nowadays, and the internet can be as much a liability to them as an asset. If it's easy for people to rate stores' performance (as many websites like epinions et al do) then folks may actually get steered away from the crappy shopping experiences. Of course, folks are fundamentally cheap, so I fully expect a good sale to bring them right back in. Most "consumers" have a shorter memory than my 13-year-old cat.

    Unfortunately, this "we need your personal information" behavior is symptomatic of a larger problem. Children at an early age are taught to obey people in authority. The "you must obey or else" threat is continued up until college. The teaching isn't really well bounded, so folks end up blindly obeying anyone who portrays himself as being an "authority figure." When retailers start this crap, I can't help but wonder why people put up with it, but they do. We're raising our children to be consumer sheep.

  170. Re:Tracking customer behavior by tooth · · Score: 1
    No real interest whatsoever in whether or not you buy X piece of crap

    Not good enough. That's the problem right there and why they will lose sales, and the deserve to with that attitude. So we should just hand over our money and be happy with shit service? No way...

    In fact, they're lucky if they've ever even met the franchise owner of the store, let alone the owner of the company.

    What? and do you think that we ever will? If you are serving a customer, you are the face of the company at that moment to them. If you don't care enough about customers, why should they care about your paycheck?

    The manager at Best Buy is not sitting at home in a deep depression because you bought your printer at Circuit City instead

    But he should pass it up the line that it's costing sales. Don't forget that customers owe stores nothing. Stores should have to work to get sales, that's what capitalism is all about. And if an item costs ($x + personal information) and people view that as too much to pay they'll lose sales.

  171. Re:Tracking customer behavior by Anonymous Coward · · Score: 0

    Well, I went to the stores' web site and left there a message that I will never buy from their store again and for the e-mail address I left 'nospam@anywhere.com'. Don't know whether they changed the policy (yeah, right!) but I pass the store often - I just don't enter it.

  172. Adding something to my HD is an option by bergeron76 · · Score: 1

    and never a 'right' of websites. If they want to 'remember' my order, they can ask me, and I can accept the cookie. If they want to place a counter, beacon, or some other BS on my computer, they can expect to be denied.

    This is basic Solicited versus UNSolicited marketing.

    Once a year, one person will ring my doorbell trying to sell something. There's a reason that only _ONE_ person is marketing that way - because it doesn't work. If I don't know who is ringing my doorbell, I don't answer the door.

    My computer/(aka most trusted personal information appliance) will get the same respect, because it's an extension of me and my persona.

    --
    Don't think that a small group of dedicated individuals can't change the world. It's the only thing that ever has.
  173. bottom line... by Hosiah · · Score: 1
    We, as consumers, bought and paid for every single byte of memory on our hard drives. Which leads one to the logical conclusion that we, and nobody else including God Himself, should have final say over what does and doesn't get written to those hard drives.

    Even if cookies cured cancer and promoted world peace and got me dates with Claudia Schiffer, I would still delete them, because they are data on my hard drive which I did not give explicit permission to to exist. I will remember my own log-ins, thank you. It's none of anybody's business what my buying/surfing habits are. And Bash shell scripts/cron jobs will continue to kill cookies in every folder they accumulate in, no matter what devious tricks Madison Avenue comes up with.

    Would you buy a car just to let somebody else drive it? And you notice that it's *marketers*, not consumers wringing their hands over cookies. That should clue you right there.

  174. Re:Tracking customer behavior by Hosiah · · Score: 1
    However, PLEASE try and remember something. The people you talk to and buy things from are not the store owners. In fact, they're lucky if they've ever even met the franchise owner of the store, let alone the owner of the company.

    You knew this was bogus even as you typed it, didn't you?

    The purpose of applying heat to salesdrones is to supply them with a negative feedback loop between myself and their employer. When they get tired of taking flack from customers for *doing their job* they'll either complain about that particular duty to the boss (hiding his cowardly ass behind closed doors where I can't question his stupid policy directly), or will quit, costing the boss a cost of replacing and retraining the employee, as well as causing the employee to be motivated to work a real job where their duties don't require them to harass the public.

    Wahhhhh-h-h, give me a bunch of guff about how Mr. and Mrs. Salesdrone need to eat, etc. I eat plenty, so do my family, and I never worked behind a register a day in my life. Or telemarketing, or drug dealing, or terrorism, or putting cookies on people's computers, or working for Bill Gates, or manning the showers at Aushwitz (sp?), or any of the other activities somebody else can hire you to do which are detrimental to the public. Is it your job to make other people's lives hell? Tell your boss you refuse to do that. If you lose that job, consider it a blessing. If it happens enough times with enough people, watch Holy "store policy" change!

    But if we all continue acting like spineless worms, we quite rightly deserve to be powerless to do anything about the various hells of modern society except snivel about it to the thin air on Slashdot. I do something about it. Salesdrones, "customer service representatives", "telecommunications-enabled consumer assitance technicians" or any other bogus thing they're called get the full heat of my wrath, as if they, personally set the policy themselves. And if my job makes me do something I morally disagree with, I circumvent the rule, campaign to get it changed, or quit.

    http://en.wikipedia.org/wiki/Scruples

    [Begin humor--!- PS I hope I've offended you and ruined your day! Because I didn't decide to type this post. I work for a homeless guy who lives in a dumpster in LA, who paid me a dime back in 1986 and said, "Go bug somebody else!" I am committed to carrying out my Mission Statement, and it is not my fault what consequences of that action transpire because I'm only following company policy. -!--End humor]

  175. Re:Tracking customer behavior by joh6nn · · Score: 1
    in part, i agree with you, and in part i disagree. i agree that there can be very little, if any, sympathy for people who knowing take jobs that they're opposed to, and try to weasel out of it by saying "i was just doing my job." and i agree that, either as a drone or a customer, you should take a stand against stupid policies. but that sort of implies that there's a black and white separation between jobs you agree with and those you don't, and there are never times when you will be asked to either "work this job that you can't stand" or "sleep in this gutter". and there are greater limits to the stands that you can take as a drone, than there are to the stands that you can take as a customer. moreover taking a stand against a stupid policy and being a dick in the face of a stupid policy are entirely different things.

    and just up and quitting? even if you'd hadn't told us that you've never worked behind a register, that right there, would have made it clear. nobody works these kinds of jobs because of the great satisfaction they get from handling vast amounts of other people's money all day. those of us who work the service industry are working it because it was the job we could find in the place where we lived at the time that we needed a job. i'm temping for a fulfillment agency right now, taking incoming service calls. it's a crappy job, and there are plenty of policies that i don't agree with. but i will be canned if i don't follow them, and this was not the first place that i applied to, so it's not like i can just up and go somewhere else.

    i think also you've failed to take into account what getting fired means for people who work service jobs like these. you get fired from Sears, so you go and apply at Kohl's:

    "So, why'd you leave Sears?"
    'I was fired for repeatedly disobeying a clearly stated policy that i was aware, but that i didn't agree with.'

    maybe i'm stupid or naive, but i don't think they're gonna be calling you back.

    and finally, the most important thing that you've failed to take into account is that We Don't Care. at all. service reps don't like customers, but we also don't hate customers. we just absolutely honestly do not give a goddamn about customers. we don't know about your problem until you tell us, and while you are explaining your problem to us, we care about it only in that it stands between us and the paperclip sculptures we've been building all morning. most of the time we will process your form, handle your refund, and make you as happy as we can, as efficiently as we can, all by our lonesome and without any whining and blustering. on the contrary, berating us as though the problem that we have only just now been informed of is our fault, has this odd tendency to cause typos to appear on the addressing labels for refund checks, and to create rebate form wormholes.

    you made some decent enough points, but you kind of also missed the point: yelling at someone when you know it's not their fault, is uncalled for, and further, it's actually a bad idea, if their job is to keep you happy: it could encourage them to stop doing their job.
    --
    i am a loser geek, crazy with an evil streak, yes i do believe there is a violent thing inside of me.
  176. Recycling unwanted cookies by Quiberon · · Score: 1

    Is there a giant 'cookie jar' out there, where I can send the cookies that I no longer want or need (but don't mind if someone else has); and in return maybe I can take a few cookies that someone else has turned in, play about with, and find what they do ?

  177. not that bad by a.d.trick · · Score: 1

    With regards to the discussion, I couldn't care less about Marketers, but saying cookies are bad because of companies like doubleclick, is like saying images are bad, because of animated gifs. Cookies have lots of really useful applications, when you want to persistant states with out requiring regristration (which I hate).

    It used to be that sites were not really customizable. Those that were, were like what netscape.com is right now, and any change required page reloads and were generally undesirable. With the advancement of a standard DOM (pretty much everyone supports level 1), you can now do lot's of really cool stuff - allowing users to change things around at light speed, making it practical and not just a bloated nuciance. The JS/UIX term is a great example of this: http://www.masswerk.at/jsuix/

    However, if you want to create something that last more than just one brower session, and works well on a per user basis (particularly for people on lan's), the only real way is to use cookies. Of course you don't store any more information in there than needed.

  178. Re:Tracking customer behavior by danielrose · · Score: 1

    It doesnt matter, they just cut the locks off luggage..

    --
    i hate pansy republicans
  179. Cookies Revenge by Anonymous Coward · · Score: 0

    Well, there's always Cookies Revenge

    http://www.hirnbrauser.de/ac/cookiesrevenge.txt

  180. Not really a good example there.. by Otto · · Score: 1

    The purpose of fdisk is to partition your disk. Yes, it could be destructive, but it is also necessary. You have to be able to partition the disk. There's no real way around it.

    This guy is collecting data tracking every users movements through his site, just to get aggregate information. Did it not occur to him that most all of this aggregate information he wants to see could be obtained without making his system capable of tracking every unique individual through the system and websites he advertises on?

    Probably not, no. He didn't consider the users privacy, because he likely doesn't think of those users as people deserving of their privacy. It probably never occurred to him to examine what could be done with the data collection system he built. He simply took the most straightforward approach and built something by which he could track every little damned thing. And then he complains that users erase their cookies, thus fucking up his privacy-invading tracking machine.

    If he simply wanted to obtain aggregate usage data, he doesn't need to use unique-ID persistant cookies. There are other ways that are not nearly as objectionable.

    --
    - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
  181. Re:Tracking customer behavior by Maximum+Prophet · · Score: 1

    I propose that all slashdot readers use the same fake password when asked in these polls. Eventually, maybe they will get it.
    My password is always wizzzard (Three z's)

    --
    All ideas^H^H^H^H^Hprocesses in this post are Patent Pending. (as well as the process of patenting all postings)
  182. Tracking license plates by metamatic · · Score: 1
    No one tracks license plates. The benefits of tracking them are far outweighed by the costs.

    Oh, you poor naive fool...

    --
    GCHQ Quantum Insert installed. If only our tongues were made of glass, how much more careful we would be when we speak
    1. Re:Tracking license plates by dillon_rinker · · Score: 1

      Golly gee, you mean teh GUBMINT is tracking license plates? Whatever shall we do? The entity that created them is tracking them!

      The government has been known to be the problem for thousands of years. The existence of one problem does not undermine the need to prevent the emergence of new problems.

      Sadly, the can is open and the worms are everywhere.

  183. Re:Tracking customer behavior by jfmiller · · Score: 1

    While I agree compleatly with the sentaments of both parent and grand parent, there are othe effective ways of getting around this. One it to memorize the address and phone number of someplace else. I recomend, for example, the local BBB. (I also know of people who like to route these calls to the local police office but I have ethical qualms about that) In any case filling a database with "junk" information makes the data incrementally less valuable, and therefroe decreases (far more then a NULL field) the disencentive to collect information.

    JFMILLER

    --
    Strive to make your client happy, not necessarly give them what they ask for
  184. Re:Tracking customer behavior by cpeterso · · Score: 1


    The TSA doesn't want you to lock your luggage any more. They need to rifle through your underpants.

  185. Re:Tracking customer behavior by Hosiah · · Score: 1
    joh6nn,

    In case you were wondering, "the gutter" is where I was born, the "mean streets" are where I was raised. I don't make my judgements on society from the window of my ivory tower, I'm doing it based on looking back on my own struggle. Everything I've ever gotten in my life, I fought for. If I were the kind of wuss who clung to one thing in life for security, living my whole life like a rat afraid to go out of his hole, I never would have survived very long. And I still kept to my scruples, my conscience, my morals, the entire time.

    Yes, I'm talking to you. Quit and go on welfare. Better your position is unfilled, with nobody to carry out those orders; and when I pay taxes, this is the exact kind of use I dream of it being put to (this, and keeping the libraries around, are pretty much the only two Government programs that work). And you certainly deserve to take it easy, if you find your world so overwhealing. God forbid you'd have had to live any year of my life, you'd have blown your fucking brains out.

  186. Gas station does track your purchases! by sorbits · · Score: 1

    When I go to the gas station, the attendant does not put a tracking device on the car that keeps track of everything I look at in the store and allows him to take note of whether I stop off for gas with one of his competitors

    Cookies doesn't work like that -- and many gas stations, supermarkets etc. actually do keep track of what you do in their store, that's part of the reason why they have member cards (and give discounts to members), i.e. it makes it possible for them to get a purchase history for their customers, even when the customers pay with cash.

    1. Re:Gas station does track your purchases! by periol · · Score: 1

      Get your head out of the sand. Cookies work like that in today's web, where you're getting cookies from all sorts of sites that have nothing to do with the one you're visiting. Read the rest of the thread, Sherlock.

      Grocery store cards are much, much easier to avoid than cookies. I get a new one every time I go to the grocery store. You don't get grocery store cards by default - you have to sign up. Boy is that a terrible analogy for cookies.

    2. Re:Gas station does track your purchases! by sorbits · · Score: 1

      The thread started by someone using cookies to track conversion rate, and then your (?) example about seeing when the visitor goes to the competitor etc.

      This is only possible if the two work together (in which case they're probably partners and not competitors, that happens with gas stations and supermarkets as well), or they both work with a 3rd party which has stuff on both sites (and isn't blocked by the UA, which e.g. doubleclick.com is by default in many browsers ;) ).

      But in the case of a 3rd party, the info gathered would be anonymous, so that's no different than e.g. Coca Cola knowing how many sales are made on each gas station etc., or even VISA or another credit card company, who does actually have personal info and can easily track cross-store/site sales.

      And what's with the insulting language?

  187. Pull vs push marketing by gidds · · Score: 1
    Well, yes, forcing me to see ads for products that I might actually ever buy is better than forcing me to watch nauseating ads for baby products, investment plans for the retired, kiddy toys, or feminine hygiene products...

    But have they considered that I might not want to be forced to watch any ads at all?

    Even for products that I am sometimes interested in, I'm not always looking to buy more. Last time I had a HD die on me, I was very interested in finding a replacement quickly, but that doesn't mean I'm happy to watch HD ads all the time.

    From my point of view, good marketing is marketing that I can go and find when I want to, not that finds me when I don't.

    --

    Ceterum censeo subscriptionem esse delendam.

  188. Re:Tracking customer behavior by joh6nn · · Score: 1

    your reply is either a massive non sequitur, a failed attempt at derailing the discussion, or just an absolutely miserable argument. you state that you're casting judgements while looking back on your own life, rather than while looking down from some ivory tower, as though the two are mutually exclusive. further, you're throwing that out there like having been through it yourself is an acceptable excuse for making other people go through it. if you truly believe that, then you've made it out of the ghetto, but the ghetto hasn't worked it's way out of you. that's the exact same philosophy behind "my da' whupped me, boy, darned if i ain't gonna whup you." congratulations: you are successfully perpetuating the cycle.

    further, you're totally fighting my battle for me with your next line or two, man. "Everything I've ever gotten in my life, I fought for." is this intended to suggest that toiling through rotten jobs at bad hours for miserable pay isn't fighting for what you get? if that's what you're saying, it's absurd, and if that's not what you're saying, you're gonna have to further explain it, then, 'cause i have no idea what that sentence has to do with what we were talking aboug. and though i don't quite see how your next sentence is relevant to the discussion either, whether or not clinging to one thing for security makes you a wuss, depends a lot on what's being clung to. or is "keeping to ones scruples the entire time" (lightly paraphrased) not the same as "clinging to one thing for security" ?

    as a brief aside, i think it's ironic that your original post berated people for not sticking to their guns in the face of an overpowering force, but your follow up post implies that your success was achieved by being flexible at the appropriate moments...

    as a curtesy, i will decline to comment on your welfar declaration, or your "mile in my shoes" closer; it's not worth the flame war.

    --
    i am a loser geek, crazy with an evil streak, yes i do believe there is a violent thing inside of me.
  189. Re:Tracking customer behavior by Hosiah · · Score: 1
    it's not worth the flame war

    My way, my man, leads to change. The public can assert itself and refuse to be treated like lab rats doing tricks to earn their next pellet, or it can go on running the rat race. You, me, everybody: we all need to be free. And if freedom were all that easy, there'd be a lot more of it to go around.

    My apologies for being offensive. I'm just pointing out, I do what I want these days. I work for me. I alter the rules to fit myself. I don't have millions of dollars, but I get by and provide for my family. And the attitude I have demonstrated, that's what got me here. You can try that path, or find your own.