Pluralistic: Dealing with dickovers (21 Jul 2026) dickovers – Pluralistic: Daily links from Cory Doctorow

Skip to content

->->->->->->->->->->->->->->->->->->->->->->->->->->->->->

Top Sources:<br>None

-->

Today's links

Dealing with dickovers: The web is an open platform, and that matters.

Hey look at this: Delights to delectate.

Object permanence: Broadcast's bad week; Congress v wifi; EFF v DRM law; Snowden and bunnie's smartphone smartcase.

Upcoming appearances: Edinburgh, Sydney, Melbourne, Brighton, London, South Bend.

Recent appearances: Where I've been.

Latest books: You keep readin' em, I'll keep writin' 'em.

Upcoming books: Like I said, I'll keep writin' 'em.

Colophon: All the rest.

Dealing with dickovers (permalink)

One of 2026's better tech-related coinages is "dickover," John Gruber's term for

a modal panel, popover, or curtain presented by a website or app, deliberately obscuring its own content to frustrate the user with an unwanted, unnecessary, mandatory interaction; e.g. asking the user to accept “cookies”, subscribe to a newsletter, install the website’s mobile app, agree to terms of service, or anything else that the user couldn’t give two shits about.

https://daringfireball.net/2026/05/what_is_a_dickover

These are bad everywhere, but they are especially terrible in the UK and EU, where websites practice a form of malicious compliance to the GDPR, Europe's landmark privacy law. Under the GDPR, websites are required to secure your affirmative consent to process your data. The obvious way that websites should respond to this is by not collecting your data unless there's a damned good reason for it, but the actual response is to repeatedly shove cookie-consent dialogs in your face before letting you use the site.

These are absolutely unnecessary. Your browser can be configured to transmit a "global privacy control signal" by default that tells websites you don't consent to be spied on while you look at their pages:

https://support.mozilla.org/en-US/kb/global-privacy-control

But many websites punish you by throwing up a "Global Privacy Control detected" dickover that forces you to click through to affirm their confirmation of your confirmation that you don't want to be spied on.

If you don't have the GPC set, websites will demand that you tell them whether you want to be spied on – and they'll do it again, every time you visit them. The website operators falsely claim that they have to do this under the terms of the GDPR (or other laws, like California's CCPA). This is a lie. Every privacy law contains an exception that allows websites to store data about you for a "legitimate interest," and that obviously includes setting a cookie that says, "don't ever spy on this user."

What's a legit interest? Well, I can tell you what it isn't. Facebook claimed that they had to spy on you, even if you opted out by laboriously clicking through one of their dickovers or by transmitting a GPC signal to their servers, because you had also clicked through their terms of service, which say, "Facebook is going to spy on you with every hour that god sends, from asshole to appetite, abandon hope all ye who enter here" (a direct quote). Facebook claims that this is a contract with you, whereby the company has promised to spy on you, and if they stop, they would be violating the contract, which might make you mad, so they are legally required to eavesdrop on every conversation you have and follow you everywhere you go:

https://www.cliffordchance.com/content/dam/cliffordchance/briefings/2023/07/european-court-of-justice-in-facebook-ruling-clarifies-interplay-between-eu-competition-law-and-data-protections-enforcement.pdf

This is bullshit, and the European Court of Justice affirmed it. But despite the fact that surveillance advertising companies are happy to stretch the definition of "legitimate interest" to cover "spying on you because our ToS say we will," these same companies insist that "legitimate purpose" can't possibly include "remembering the fact that you told us not to spy on you the last time you were here," and so every time you click through to one of many popular websites, you get a dickover, and the only way to make it stop is to "consent" to being spied upon.

But it doesn't have to be this way. While the right answer to this kind of rampant lawlessness is stonking fines and even the corporate death penalty for repeat offenders, internet users have a myriad of options available to them for banishing dickovers to the scrapheap of history. These measures aren't difficult to avail yourself of, and using them will make your life infinitely better, so I'm going to tell you about some of them.

Before I start, one note: these measures only work on browsers, not apps. An app is a webpage wrapped in the right kind of IP law to make it a felony to change how it works, which is why companies are infinitely horny to get you to use their apps, not their...