3 ms·
> Users tend to be annoyed when you tell them only the truth– “This download was not reported as not safe.”. First time that I am hearing users prefer a vague
by hartator 10y ago
> Users tend to be annoyed when you tell them only the truth– “This download was not reported as not safe.”.
First time that I am hearing users prefer a vague error explanation than truthful precise one.
And there is a silver bullet. Teach people - and most people already know it, don't assume people are idiots - how to recognize a domain name. Then the padlock. But, domaine names are infinte more important than padlocks. Always been the case and will likely never change in the near future.
- marvy 10y ago> teach people how to recognize domain name You say don't assume people are idiots. I agree, most are not. I will go further and say that, even among those who fall for these scam sites, most are not idiots (though the proportion is higher.) But! You underestimate the scammers, and you underestimate the size of their toolkit. Sure, it's easy to look at an example like paypal.com.evil.com and think "I can teach users to read that properly". Maybe you can. But how about paypa1.com? And how about once we start playing games with Unicode? Can you tell a Latin lowercase A from the Cyrillic one? Are you going to teach users to copy and paste any suspicious URL into hex editor so as to make sure that its ASCII? You're right about at least one thing: if you could get people to read domain names, that would be a silver bullet. And it's definitely possible to much better than now. But I worry that the scammers would simply up their game in response.