~/talk

Engineering a Consent Sandbox to Eliminate Annoying Pop-Ups and Dark Patterns

on YouTube 25m
Talkat Data Con LA 2021 · 2021-09-17..09-19· [privacy-and-compliance, web-performance]

speaker

name:Ben Brook
links:none on file

resources

video:https://youtu.be/ugMHsUuxG6w
slides:none on file

summary

Explains a concrete engineering path: tried sandboxed iframes (too slow), dynamic CSPs (blocks but can’t replay), then built a runtime firewall that patches all JS network APIs plus virtual documents to intercept DOM-caused requests, quarantines events locally and replays them after consent. Ships as airgap.js — a 30 KB drop-in that covers fetch XHR sendBeacon websockets image/script loads, is tested on heavy interactive sites with no noticeable overhead, and is available via the Transcend Consent Manager.

AI-written summary · about

chapters (11)

  1. 0:00Introduction to talk
  2. 1:05Broken consent experience
  3. 3:35Local tracking solution
  4. 7:27Dynamic CSP approach
  5. 10:17Patching network APIs
  6. 14:32Introducing AirGap.js
  7. 15:57Q&A begins
  8. 16:17Security applications
  9. 17:42Product availability
  10. 19:32Dark patterns explained
  11. 21:38Closing remarks

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.