6 ms·

I once asked a Mozilla developer why does Firefox display "Adobe Flash plugin blocked on this page" notification when the page apparently doesn't use Flash at a

I once asked a Mozilla developer why does Firefox display "Adobe Flash plugin blocked on this page" notification when the page apparently doesn't use Flash at all and choosing either option (allow/block) doesn't impede its functionality or change the appearance whatsoever. The developer replied there are Flash cookies being set and it's possible an attack could come through them. When I asked if he knows about any such case happening, the answer was no. Then what is the purpose of bothering the user about an attack vector if the attack is merely theoretical? My conclusion was that software products normally stimulate adoption by offering useful features but Firefox deviated from this attitude and adopted what I call "avoidance of annoyance" – the user has to upgrade to the latest version to avoid being annoyed by incessant popups and notifications that can only be delayed but never permanently removed. The irony is that updating to the latest version of Firefox will get rid of the previous generation of notifications while bringing a new cycle, thus ensuring users are constantly kept in a state of anguish and frustration that will keep them updating for the sake of updating.

mrob 10y ago
>what is the purpose of bothering the user about an attack vector if the attack is merely theoretical? It helps keep the attack theoretical.
- greendestiny_re 10y ago
  In what way?
pcwalton 10y ago
> When I asked if he knows about any such case happening, the answer was no. Then what is the purpose of bothering the user about an attack vector if the attack is merely theoretical? I'm not OK with the philosophy of "let's not fix any security holes until we find someone actively exploiting them".
- greendestiny_re 10y ago
  You are using quotation marks as if though I said those words. quote (kwəut) verb 1. to repeat the exact words of a person as they were said or written. My point was about not giving the user enough information to make an informed decision yet demanding a decision anyway.
  - cbreeden 10y ago
    It's still not clear to me. Are you suggesting that uses not be notified of a potential yet not verified security hole or not?
    - greendestiny_re 10y ago
      In short, I would like to see Firefox empower and inform its users. The current implementation of the Adobe Flash plugin warning does neither, and by the looks of it, add-on permissions mentioned in the OP will be the same.
  - ben0x539 10y ago
    https://en.wikipedia.org/wiki/Use%E2%80%93mention_distinction https://en.wikipedia.org/wiki/Use%E2%80%93mention_distinctio... suggests that quotation marks are valid here (which is clearly the most important aspect of this dispute)
    - greendestiny_re 10y ago
      I'd cede the point if the topic was abstract philosophy or my comment was intentionally vague, but neither of those are true. What I said and what pcwalton argued against have nothing in common, except two out of 13 words: "any" and "them", which means pcwalton simply made up 84.62% of that statement. Why? It makes for a handy strawman so he can appear intellectually superior.

mrob 10y ago

>what is the purpose of bothering the user about an attack vector if the attack is merely theoretical? It helps keep the attack theoretical.

greendestiny_re 10y ago
In what way?

pcwalton 10y ago

> When I asked if he knows about any such case happening, the answer was no. Then what is the purpose of bothering the user about an attack vector if the attack is merely theoretical? I'm not OK with the philosophy of "let's not fix any security holes until we find someone actively exploiting them".

greendestiny_re 10y ago
You are using quotation marks as if though I said those words. quote (kwəut) verb 1. to repeat the exact words of a person as they were said or written. My point was about not giving the user enough information to make an informed decision yet demanding a decision anyway.
- cbreeden 10y ago
  It's still not clear to me. Are you suggesting that uses not be notified of a potential yet not verified security hole or not?
  - greendestiny_re 10y ago
    In short, I would like to see Firefox empower and inform its users. The current implementation of the Adobe Flash plugin warning does neither, and by the looks of it, add-on permissions mentioned in the OP will be the same.
- ben0x539 10y ago
  https://en.wikipedia.org/wiki/Use%E2%80%93mention_distinction https://en.wikipedia.org/wiki/Use%E2%80%93mention_distinctio... suggests that quotation marks are valid here (which is clearly the most important aspect of this dispute)
  - greendestiny_re 10y ago
    I'd cede the point if the topic was abstract philosophy or my comment was intentionally vague, but neither of those are true. What I said and what pcwalton argued against have nothing in common, except two out of 13 words: "any" and "them", which means pcwalton simply made up 84.62% of that statement. Why? It makes for a handy strawman so he can appear intellectually superior.