{"id":11085,"date":"2011-03-24T15:12:54","date_gmt":"2011-03-24T20:12:54","guid":{"rendered":"http:\/\/www.shamusyoung.com\/twentysidedtale\/?p=11085"},"modified":"2011-03-24T16:26:23","modified_gmt":"2011-03-24T21:26:23","slug":"cookies-for-everyone","status":"publish","type":"post","link":"https:\/\/www.shamusyoung.com\/twentysidedtale\/?p=11085","title":{"rendered":"Cookies for Everyone"},"content":{"rendered":"<p><table   class=\"\" cellpadding='0' cellspacing='0' border='0' align='center'><tr><td><img src='https:\/\/www.shamusyoung.com\/twentysidedtale\/images\/splash_cookies.jpg' class='insetimage'   alt='splash_cookies.jpg' title='splash_cookies.jpg'\/><\/td><\/tr><\/table><\/p>\n<p>Blurr had <a href=\"http:\/\/www.shamusyoung.com\/twentysidedtale\/?p=11082&#038;cpage=1#comment-196458\">this<\/a> to say in the comments the other day:<\/p>\n<blockquote><p>I am very much against Facebook integration on other websites. I know I can&#39;t be the only one. I tried a while ago to figure out how to block Facebook when I&#39;m not on the main Facebook website, but couldn&#39;t find anything.<\/p>\n<p>My concern is that because this &#8220;like&#8221; link appears on blogs all over the place, Facebook can get a pretty good idea of my browsing habits. I am against this on principle.<\/p>\n<p>It also seems to me that very few people use the like button.<\/p>\n<p>I have been a reader since near the beginning of DMotR. Your website is one of the few that I have white-listed in ad-block (though sometimes ads don&#39;t load anyway :S ). Please remove this terrible thing from your blog.<\/p><\/blockquote>\n<p>My first reaction was that this was a bit paranoid.  I was sure the button wouldn&#8217;t do anything unless you pushed it.  It turns out that no, that is not the case.  In fact, Facebook keeps track of where it sees you.  If a page has a Facebook button on it, then <a href=\"http:\/\/www.thinq.co.uk\/2010\/11\/30\/facebooks-button-tracking-you\/\">Facebook knows you were on that page<\/a>.  We don&#8217;t know what they do with that info, but we know they have it.  Here&#8217;s the thing:<\/p>\n<p><!--more-->The problem is with web cookies. A cookie is a small text file created by your web browser.  It stores &#8220;name \/ value pairs&#8221;, which is fancy programmer talk for stuff like this:<\/p>\n<p><code>username=PresidentSkroob<br \/>\npassword=12345<br \/>\nlast_visit=March 24, 2011<br \/>\nmobile_user=no<\/code><\/p>\n<p>It lets websites store information on <em>your<\/em> computer.  These files are keyed to the domain name.  So, Facebook can only read cookies created by your visit to Facebook.com and The Escapist can only see inside of cookies created by your visit to escapistmagazine.com.  The information contained in a cookie is sent when you visit a site. So, if I previously visited Facebook on this computer, it will send my Facebook cookie, which will let Facebook have my name and (if I so choose) password.  That way I don&#8217;t have to log in every time I visit the site, and it can know ahead of time if I want the lightweight mobile version of the page or the all-singing, all-dancing, graphic-heavy full version.  If I go to another computer, it won&#8217;t have a Facebook cookie on it, and so I&#8217;ll have to type in my name &#038; password to log in.  <\/p>\n<p>Even if I tell FB not to save my password, it still saves my username.  That username gets sent when I load the page, even if I&#8217;m not logged in.  See, that little button at the bottom of this page is actually a little sub-webpage. It&#8217;s a little window with a Facebook page inside of it.  (Same goes for the ads on the right.  That&#8217;s a sub-window with a Google page inside of it.)  When you visited this page, your Facebook.com cookie (assuming you have one) was sent to Facebook. Facebook sees your username, and because of how HTTP headers work, it also sees that you visited from shamusyoung.com. Ergo, Facebook knows you were here.  Of course, this only applies to webpages with Facebook features.  Facebook has no way of seeing where else you might go.<\/p>\n<p>It&#8217;s important to point out that this is not some nefarious new thing Facebook is doing.  Everyone uses cookies. This site remembers the name you use in the comments because that stuff is stored in a shamusyoung.com cookie on your computer.  Google uses them.  Battle.net uses them.  Blogger.com. My Space. Youtube. The Escapist. Google. Yahoo. Blogspot. Wikipedia. Twitter. Anywhere that you log in knows at least your username and the last time you visited.<\/p>\n<p>The reason people get worked up about Facebook is because it&#8217;s so ubiquitous. (And because the founder of Facebook is reportedly a complete douche.) Nobody cares about Yahoo cookies because Yahoo isn&#8217;t lurking in the corner of every page on the web. The problem isn&#8217;t that Facebook is more hostile to privacy than other sites, it&#8217;s that Facebook naturally has access to data that other sites don&#8217;t, because they&#8217;re less popular.<\/p>\n<p>You can decide for yourself how much this bothers you.  Some people won&#8217;t stand for it because they&#8217;re concerned about privacy. Some people won&#8217;t stand for it because they&#8217;re paranoid cranks. Some people don&#8217;t care because they&#8217;re not concerned about the data involved.  Some people don&#8217;t care because they&#8217;re oblivious. There are reasonable people and morons on both sides of this. <\/p>\n<p>If you&#8217;re really concerned about this, there are things you can do.  You can set your cookies to be deleted every time you close your web browser.  It will make it impossible for Facebook to see where you are, even when visiting sites like this one.<\/p>\n<p><table   class=\"\" cellpadding='0' cellspacing='0' border='0' align='center'><tr><td><img src='https:\/\/www.shamusyoung.com\/twentysidedtale\/images\/firefox_privacy.jpg' class='insetimage'   alt='firefox_privacy.jpg' title='firefox_privacy.jpg'\/><\/td><\/tr><\/table><\/p>\n<p>Of course, if you clear all cookies every time, then you&#8217;ll have to always enter your your full name and password every time.  So this is a classic trade-off between convenience and security. Those two never get along.<\/p>\n<p>For a blog like mine, word of mouth is life.  You need a stream of new users just to replace the ones that wander off.  Some people get mad and leave.  Or lose interest when I change focus to something outside of their sphere of interest. Sometimes they just get tired of me. It happens.  <\/p>\n<p>An example: I <em>love<\/em> <a href=\"http:\/\/lileks.com\/bleat\/\">James Lileks<\/a>.  If <a href=\"http:\/\/www.escapistmagazine.com\/articles\/view\/columns\/experienced-points\/8690-Experienced-Points-For-Old-Man-Murray\">Old Man Murray<\/a> was my inspiration to start writing comedy about games, Lileks was the inspiration for my more <a href=\"?p=764\">personal stuff<\/a>. The blog is especially great for a nostalgia fetishist like myself. I love stopping in for a dose of, &#8220;Time is passing like a vapor. You&#8217;ll be dead before you know it. But in the meantime, check out this kitschy slice of 60&#8217;s pop-culture!&#8221; But last year I stopped visiting his site regularly.  He&#8217;s as fun as ever, but after a decade of reading I no longer felt the need to check the blog every morning. It happens. I&#8217;m sure it happens to my readers all the time.<\/p>\n<p>So replenishing the herd is a must. (You don&#8217;t mind if I call you a herd, do you? No? Cool.) There is nothing I can do to directly draw in new readers, short of forum spam and link-begging on more popular sites &#8211; which is one of the most labor-intensive ways of wasting one&#8217;s time. No, I need word of mouth, and the Facebook Like button is the perfect tool for the job.  It&#8217;s governed entirely by readers.  People press it when I do something they like.  That action will appear on their Facebook page and attract their friends, who probably share a lot of common tastes and interests.  It takes my best material and promotes it to people who are most likely to enjoy it.  Even if I was willing to pay money for an advertising campaign, I wouldn&#8217;t be able to find something as effective as that little button. <\/p>\n","protected":false},"excerpt":{"rendered":"<p>Blurr had this to say in the comments the other day: I am very much against Facebook integration on other websites. I know I can&#39;t be the only one. I tried a while ago to figure out how to block Facebook when I&#39;m not on the main Facebook website, but couldn&#39;t find anything. My concern [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[111],"tags":[],"class_list":["post-11085","post","type-post","status-publish","format-standard","hentry","category-notices"],"_links":{"self":[{"href":"https:\/\/www.shamusyoung.com\/twentysidedtale\/index.php?rest_route=\/wp\/v2\/posts\/11085","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.shamusyoung.com\/twentysidedtale\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.shamusyoung.com\/twentysidedtale\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.shamusyoung.com\/twentysidedtale\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.shamusyoung.com\/twentysidedtale\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=11085"}],"version-history":[{"count":0,"href":"https:\/\/www.shamusyoung.com\/twentysidedtale\/index.php?rest_route=\/wp\/v2\/posts\/11085\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.shamusyoung.com\/twentysidedtale\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=11085"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.shamusyoung.com\/twentysidedtale\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=11085"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.shamusyoung.com\/twentysidedtale\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=11085"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}