Slashdot Mirror


W3C Rejects Ad Industry's Do-Not-Track Proposal

itwbennett writes "The W3C's Tracking Protection Working Group, which is mainly concerned with standardizing the mechanisms for server-side compliance with do-not-track requests, has rejected a proposal by from the Digital Advertising Alliance (DAA) that would have allowed advertisers to continue profiling users who had asked not to be tracked. The proposal would also have allowed them to 'retarget' ads to those users by showing ads relevant to one site or transaction on all subsequent sites they visited, according to the co-chairs of the W3C's Tracking Protection Working Group. The working group co-chairs also said that they planned to reject proposals similar to those made by the DAA."

36 of 162 comments (clear)

  1. Do Not Track... by Synerg1y · · Score: 5, Insightful

    The most useless checkbox in the history of browsers.

    1. Re:Do Not Track... by lart2150 · · Score: 2

      That only works if the ad requires javascipt a lot of them are just nested iframes. I've been very happy with the noscript iframe setting! most sites only use iframes now for ads and if I need it I can still enable it for just the domain that I need it for.

    2. Re:Do Not Track... by NewWorldDan · · Score: 2

      Also, turn off 3rd party cookies. And run an ad blocker. That will substantially cut down on things. Until things eventually get integrated on the back end so that everything appears to be coming from the site that you're visiting. Like spam, it's an arms race. While spam is 99.8% solved, do not track will be much more challenging.

    3. Re:Do Not Track... by Anonymous Coward · · Score: 4, Informative

      Request Policy complements noscript quite nicely, as it allows you to restrict access to third party domains. E.g., by default, requests from example.net to adserv.example.com are rejected.

    4. Re:Do Not Track... by UltraZelda64 · · Score: 4, Interesting

      Yet, Mozilla seems hell-bent on supporting this destined-to-be-ignored flag, while they remove everything--even Javascript settings--from the GUI. Pure irony.

      I do have the Do Not Track setting turned on, but only as a final "fuck off." My real lines of defense are disabled third-party cookies, NoScript, DoNotTrackMe and AdBlock Plus. Anyone who really trusts in that header is a nut.

    5. Re:Do Not Track... by betterunixthanunix · · Score: 2

      DNT is not more challenging for technical reasons. Today's ad blockers remove almost all advertising. The real challenge is politics: the popular browser makers are all in bed with the advertisers.

      --
      Palm trees and 8
    6. Re:Do Not Track... by realityimpaired · · Score: 2

      Never heard of flash cookies, eh?

    7. Re:Do Not Track... by fuzzyfuzzyfungus · · Score: 2

      it says a lot for the people that bought into the DNT, they'll buy into just about anything. Uncheck your third party cookies in your browser and that should take care of them tracking you to other sites. I have a multi purpose firewall that kept finding tracking cookies until I cut out third party cookies now it doesn't find any.

      Your measures are... outmoded.

      Sure, cookies make things markedly easier(since data persistence is what they do, in a sort of feeble, hacky way); but there are so many more bits of information available if you want to fingerprint a user. Even better, the ones that squirm the hardest against the easy methods tend to end up with the most unusual configurations.

    8. Re:Do Not Track... by realityimpaired · · Score: 2

      The problem is, a certain amount of advertising is necessary to make ends meet. The content doesn't pay for itself, and the choices are either to put everything behind a paywall, or have advertising. The tracking/etc. is the ad industry's attempt to make advertising online more profitable: they have a *very* low clickthrough rate to begin with, and hope that by providing targetted advertising, they'll have a better return on investment, and can sell ad impressions for more money.

      At least in theory. In practice, what they're tracking on people is downright creepy. I do run ad blockers, and cookie cleaners, and multiple other add-ons to prevent my browser from leaving any permanent traces from session to session. It's not because I find advertising specifically intrusive, it's because I don't like the tracking.

    9. Re:Do Not Track... by sjames · · Score: 4, Insightful

      The problem there is that the advertisers forgot the old adage "you don't shit where you eat".

      If they had simply shown a few ads and made sure their servers were up to the task, few if any would have even bothered with ad-blockers. But no, They had to plaster the page with jumping singing dancing ads that pop up and pop under and triple (or worse) the page load time. Then to top it off, they didn't even bother to make sure the ads weren't drive-by viruses or illegal scams.

      Since all of that wasn't enough, they decided to also become internet stalkers.

      It's only natural that people came to consider most any ad they see on the web to be a probable scam and to run ad blockers to avoid the assault on their senses and more that a few infections as well.

      Then finally, when given a chance to restore some tiny shred of good will, they decided to ignore DNT.

    10. Re:Do Not Track... by betterunixthanunix · · Score: 3, Insightful

      Advertisers sound like they were willing to play along if W3C was up for some compromise

      DNT is a compromise. If we were unwilling to compromise, we would build ad-blockers into browsers as a default, much like pop-up blocking ten years ago. It was because of people like you who would not stop whining about how important advertiser dollars are to keep the web alive that we even considered something like DNT. It was because advertisers promised that they really do respect our wishes, that ad blockers and legal restrictions on tracking are not needed, that DNT was ever considered by anyone.

      The advertisers showed their true colors. They never wanted a compromise, they just wanted a facade that allows them to pretend they respect us while continuing to do what they have done all along.

      --
      Palm trees and 8
    11. Re:Do Not Track... by Lennie · · Score: 2

      Evercookie and profiling prove that anything technical can be used to track you on the web.

      If you don't want to be tracked, you'll need every browser in the world to be the same implementation (make, brand, code and version !) on the same screen on the same hardware and using Tor.

      Then, maybe, all browsers will look the same and they'll not be able to track you.

      So if you believe that, then there is only one solution, a way for the user to communicate to the site he/she doesn't want to be tracked and a law which forces companies to comply with the wishes of the users.

      --
      New things are always on the horizon
    12. Re: Do Not Track... by markjhood2003 · · Score: 4, Interesting

      Firegloves: http://fingerprint.pet-portal.eu/?menu=6

      A Firefox plugin to impede fingerprinting-based tracking while maintaining browsing experience. You may download and install the demo version of the extension by clicking the link below. This is not the final version; it is recommended to check this page regularly for updates. We welcome your remarks and suggestions - you may contact us using the Contact page.

      I've used it and it works pretty well for a demo.

    13. Re:Do Not Track... by LordLimecat · · Score: 2

      It was because of people like you who would not stop whining about how important advertiser dollars are to keep the web alive that we even considered something like DNT.

      Ads are why so much of the internet is free. I dont have to like it, you dont have to like it, but ads are why youtube is making a profit and why its still alive / free (remember the days when it was wondered, "when will google shutter this money sink?"). Ads are the very reason for Slashdot's current existence, why search engines exist, etc.

      If adblockers were built into browsers by default, can you think of a single reason for yahoo and google to continue providing search engines? Or exist? Gee, there goes gmail, yahoo mail, yahoo news, youtube, hotmail, facebook, unpaid hulu, free news sites...

      Im sure the internet will outlast the fall of ad-supported sites, I just think there will be a lot less of the free crap that everyone loves so much.

    14. Re:Do Not Track... by thegarbz · · Score: 2

      DNT is a compromise.

      No. DNT was a compromise. It was a feature with one purpose, to reflect the desire of the user not to be tracked. When a certain company with a certain shithouse browser decided to turn it on my default in a software update all for a bit of temporary marketing, DNT ceased reflecting the desire of the user. The ad companies were on board with it too as the likely people to click DNT were the ones unlikely to click ads to begin with.

      It wasn't until a large percentage of users unknowingly ended up with a browser that had it ticked by default that DNT stopped being about a privacy compromise and started being a direct attack and abuse of the feature.

      It's not advertisers showing their true colours, it's just human nature. No company is going to bend forward, grab their ankles and voluntarily get screwed all because of some unrelated idiot wanted to market their browser as the most consumer protective.

  2. Advertising is butts by Reverand+Dave · · Score: 4, Insightful

    Marketing departments are a bunch of assholes.

    --
    I got here through a series of tubes
  3. Do Not Track... by evanh · · Score: 2

    Yep. Turning off scripting is the only answer.

  4. Re:Is it true Apache webservers block DNT? by TWiTfan · · Score: 4, Informative

    Here is an article on it from Ars Technica, for anyone who thinks I'm making this shit up.

    --
    The cow says "Moo." The dog says "Woof." The Timothy says "Thanks, valued customer. We appreciate your input."
  5. Re:Is it true Apache webservers block DNT? by phizi0n · · Score: 3, Insightful

    Apache ignores DNT from versions of IE that have it enabled by default because it's supposed to be something that the user specifically enables, not a blanket "hey ad industry, completely ignore this because it's always on" option.

  6. Not useless, but its usefulness is now over by betterunixthanunix · · Score: 5, Insightful

    DNT had exactly one use: to determine whether or not advertisers respect the wishes of people who do not want their browsing habits tracked. The verdict is in, and to nobody's surprise advertisers have no respect for anyone. Now we know that we are justified in using ad-blocking plugins and building browsers that block ads by default.

    --
    Palm trees and 8
    1. Re:Not useless, but its usefulness is now over by poetmatt · · Score: 2

      the fact that people ever thought for a second that they shouldn't have the right to see what they're looking for on a website and not ads or other shit is the problem. It's like when people defend websites that threaten others, saying their ad revenue is the only way they survive when other options exist. Screw ads. Allow em when *you* choose because you're okay with it, not just because you dare to go to websites.

      I encourage people to always adblock on techreport, because they threaten to nuke user accounts that talk about using adblocking. That's not the right approach.

    2. Re:Not useless, but its usefulness is now over by tlhIngan · · Score: 4, Informative

      DNT had exactly one use: to determine whether or not advertisers respect the wishes of people who do not want their browsing habits tracked. The verdict is in, and to nobody's surprise advertisers have no respect for anyone. Now we know that we are justified in using ad-blocking plugins and building browsers that block ads by default.

      Careful, advertisers like Google have paid Adblock Plus to whitelist their ads. Sure it's google ads today, but Google owns the vast majority of online ad networks and commands practically all the online ad markets, and if they're paying off the ad blockers to whitelist...

      And of course, Google is naturally tracking you. Especially whitelisted.

      I encourage people to always adblock on techreport, because they threaten to nuke user accounts that talk about using adblocking. That's not the right approach.

      It depends. Sites depend on ads to pay for content and hosting, and many with "premium" options do not allow talk of ad blockers as well. Even reputable ones - like Ars Technica. Even the merest hint of ad blocking without whitelisting the site in question is out. I got banned for mentioning noscript and didn't even mention blocking the site's ads, just it happened to block a good chunk of ads.

      Of course, one side effect of this is sites get desperate for money and they end up getting sold and re-sold to other companies. It's only a matter of time before pretty much online ads disappear as we know them because websites are all purchased up and owned by a few media conglomerates who bought them for the user information and all that.

      Of course, the little guy with a blog who wants to make a couple of bucks won't be able to attract any advertisers because they all went to the big guys with their massive data pools from buying up websites left and right.

    3. Re:Not useless, but its usefulness is now over by betterunixthanunix · · Score: 5, Insightful

      You are acting like tracking and advertising are inseparable. They are not, you can advertise without tracking people and you can make money doing so. I do not want to be tracked, and the only technical solution at this point is to block advertisements -- because even loading a static image from an advertiser will be used as a data point to track me.

      If a website wants me to view its ads, it should refuse the business of advertisers that create privacy-invading ads. If websites were standing up for their users they would not be at risk of becoming collateral damage in this fight.

      --
      Palm trees and 8
    4. Re:Not useless, but its usefulness is now over by betterunixthanunix · · Score: 4, Informative

      Careful, advertisers like Google have paid Adblock Plus to whitelist their ads

      Sure, but ABP has an easy-to-find checkbox to enable/disable whitelisted ads. There are also many other ad blockers out there that can be used if ABP ever stops working effectively (and being easy to configure).

      --
      Palm trees and 8
    5. Re:Not useless, but its usefulness is now over by foniksonik · · Score: 3, Informative

      Analytics doesn't track you across websites. It really does very little beyond what server logs provide. The one advantage is a cookie that says you are a repeat visitor. Also it is a same domain cookie so no other sites can access it. Google does have access to the data but its not attached to a unique record so they can't build an individual profile for you.

      The same is true for Coremetrics and Omniture.

      --
      A fool throws a stone into a well and a thousand sages can not remove it.
    6. Re:Not useless, but its usefulness is now over by foniksonik · · Score: 2

      Retargeting is 5x more effective than context based ad targeting.

      Here's why.

      Imagine that you've just been shopping around for a new pair of shoes. You like Nike so you went to Nike.com. They set a remarketing cookie. You want to price compare and find more reviews, so off you go to Amazon. Then you get distracted by a book you want and forget about shoes.

      The next day you hop online and go to a tech blog. They serve ads to pay the bills. Now the article you are reading has nothing to do with shoes ( its about online privacy and tracking tags) but look right there, an ad for Nike. Your memory kicks in and you recall shopping for shoes. You've already price compared and decided you're okay with Nikes prices and the reviews were good, so all that's left is to buy (that's internal dialogue). The Nike ad is right they so you click and then buy.

      Was the retargeted ad helpful to you? Some would say yes. Was it invasive? Maybe. Did you buy a pair of shoes from the company that used retargeted ads, absolutely.

      --
      A fool throws a stone into a well and a thousand sages can not remove it.
    7. Re:Not useless, but its usefulness is now over by Opportunist · · Score: 4, Insightful

      That is exactly the point.

      If advertisers DID heed the DNT request and not track those who see their ads, fewer people would even bother to reach for ad blockers. But the greed was stronger. Why only benefit from people seeing your ads when you can as well sell their profile while you're at it?

      And now the greedy call those defending against their greed greedy. That's really rich.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    8. Re:Not useless, but its usefulness is now over by poetmatt · · Score: 2

      Who said I'm telling them they can't put up an ad?

      I'm just refusing to look at it.

      Putting up an ad and relying on nothing else is a sign of laziness/failed business.

    9. Re:Not useless, but its usefulness is now over by Meeni · · Score: 2

      Its one thing to put adds in your "private" space. I dislike adds and run adblockers at all time anyway, but I certainly respect that one may do what he wants on -his- website.

      Now, we are talking about people profiling YOU. They stalk you wherever you go, take notes of all the things you do, and alter your experience of the internet based on arbitrary criterion. There is a real danger, when some massive "administration" (yeah, I know, the state is the -only- possible evil, large corporations that lock a market are never to blame because private sector is always right) takes arbitrary decisions that impact my life.

      Case in point, I was watching videos of "crocodile" addicts on youtube, out of curiosity. For 6 weeks, I had adds about withdrawal clinics plastered all around my device. How do I explain to casual bystanders that it looks like some algorithm has profiled me as a drug addict ? What if it suddenly decide to target me for a massive porn campaign based on some bogus statistical behavior, how do I explain that to my wife ? What if they use the collected stuff to change my insurance rate, deny me employment, or discriminate in another way ? What I do on the internet is my own private business. I do not want it to be public, I do not want it to be -private- but the property of somebody else that will sell my "profile" to all evil-doers that just want to molest me so that they can juice another quarter out of me.

      So yeah, they have the right to show their adds on their website. They don't have the right to stalk me wherever I go on the internet.

  7. Re:Just block ads by fustakrakich · · Score: 2

    Why spend the effort on the courts?

    I could make some money. In fact if you send me 20 dollars and a stamped envelope, I'll send you a brochure on how you too can become a millionaire with this amazing opportunity... all from your home office.

    --
    “He’s not deformed, he’s just drunk!”
  8. Re:Is it true Apache webservers block DNT? by Barefoot+Monkey · · Score: 3, Informative

    That happened last year, but it was only for a month. The patch to disregard DNT from IE was actually made by one of the authors of the DNT standard in response to IE catastrophically mutilating the standard, but they soon decided that messing with Apache wasn't appropriate and reverted the patch.

  9. Re:Lack of Trust by betterunixthanunix · · Score: 4, Insightful

    SPAM is unsolicited email sent on your dollar, consuming your resources.

    When my CPU is spinning because of your Javascript-super-fancy-tracks-all-the-things advertisement, you are consuming my resources. When I have to download a megabyte of Javascript/Flash/whatever to see your ads, you are consuming my resources. When I have to spend time trying to navigate around annoying hover ads, you are consuming my resources.

    At least when I receive spam, I know the spammer has no idea who I am or whether or not I opened their message. Website advertisers try hard to track everything, even when you are very clearly trying to stop them; that is what DNT has demonstrated.

    Ads are implicitly requested when you visit an ad-supported site

    No, the page is what is requested. My browser is not obligated to do anything at all with the webpage your server sends it. There is no implicit request; you explicitly asked my browser to request ads from the advertisers you choose to do business with.

    People making a big deal about this should perhaps rethink why they are entitled to someone else's work (the website) without respecting their terms (the ads).

    You put your work on the open web. You did not put it behind a paywall. You did not force me to view your ads before seeing your page.

    Nobody wrote an ad blocker because they were angry about textual ads or banner ads. Ad blockers exists because the advertisers have no respect for anyone's desire to not be tracked, to not have hover ads, pop-ups, pop-unders, Flash, Java, and other adware annoyances. Advertisers have shot themselves in the foot with their own greed, and if your website is not saying, "No, I do not want you to piss off my users with these antics" then your website is part of the problem.

    --
    Palm trees and 8
  10. Does the NSA respect it ? by Alain+Williams · · Score: 3, Funny

    If the NSA were to respect the DNT header then I would stop fretting about a lot of the rest of this week's news :-)

  11. DoNotTrackMe extension by Burz · · Score: 2

    https://www.abine.com/dntdetail.php

    This is the anti-tracking extension that does NOT have a partnership with the ad industry.

  12. Re:Almost as useful as... by Todd+Knarr · · Score: 2

    It's not so much a question of the companies respecting it as that they're on notice about it. It's like a no-trespassing sign on a fence. It may be easy to hop over the fence, and it doesn't actually stop anyone who intends to trespass. They can't, however, claim they didn't realize they were trespassing if they have to climb over a fence that at every point along it would've had at least one no-trespassing sign visible to them. That makes it much easier to deal with them when they get caught trespassing. That doesn't mean much for an individual, but when a large security breach occurs and information they collected gets stolen it means a lot if there's a class-action suit filed. Or if the breach affects European users who can invoke more stringent laws.

  13. Re:Is it true Apache webservers block DNT? by QuasiSteve · · Score: 2

    IE catastrophically mutilating the standard

    Oh come on. The standard was that people would choose whether or not to enable 'do not track', without being specific about how that should be chosen.

    So Microsoft let users choose during installation, express settings, or custom settings, with the effects of the express settings (including the DNT setting) elaborated above:
    http://i.imgur.com/Wo8nG.png

    But then people cried foul and quickly suggested that they meant that people would have to specifically choose for that very specific option a 'yes or no' choice, rather than part of a package of options.

    But let's face it, if they still put that in the installation screen, on a separate page, asking users if they would like to be tracked by the advertising industry yes/no, they would still catch a lot of flak and they would quickly suggest that what they really meant was that DNT should be off by default, and the option to turn DNT on should never be advertised (hehe) and instead hidden deeply away in a configuration dialog and named something like "Disable tailor-made rich content that enhances your browsing experience." - and if enough people did manage to find their way there (due to people telling each other about it on social media), the advertising industry would quickly ignore it anyway since there's no legal backing behind it that would result in fines for such disregarding the users' choice.

    If anything, Microsoft should be applauded for this. Even if the intended effect may not have been to essentially kill DNT by exposing what a horribly useless feature it is, I don't think anybody sane is losing sleep over the fact that it did.

    Too bad the W3C hasn't fully caught on yet and is still at least considering a DNT thing. But good on them for rejecting the current proposal from the advertising industry, I guess.