3 ms·

Yeah, why did we ever get away from the glory days of bare-metal programming. Computers are only for people who understand them. Sarcasm aside, I'm a software

by ng12 9y ago

Yeah, why did we ever get away from the glory days of bare-metal programming. Computers are only for people who understand them. Sarcasm aside, I'm a software engineer with a very superficial understanding of the certificate system. I'm not even convinced of my own ability to notice when something's wrong.

AnIdiotOnTheNet 9y ago
What I'm saying is: why do you people always assume the average user of a desktop computer is a drooling moron? Because that's what you're doing when you say shit like this. Thinking like that is what gave us forced automatic updates.
- ng12 9y ago
  I don't agree with your characterization as somebody who doesn't understand the significance of a root CA as a drooling idiot. The text of one of your post's siblings is: > A root lets you make a valid cert for any domain. It can be used to create a man-in-the-middle attack if paired with a proxy. If you were to walk down the street tomorrow and ask 10 people to define "cert", "domain", "MITM", and "proxy" I'd wager you'd get 0 correct responses. I'd also wager those 10 people use computers every day -- and I don't think that's a problem. You shouldn't have to study and understand byzantine systems just to use a computer.
  - AnIdiotOnTheNet 9y ago
    What I disagree with is the characterization of the user as someone who a) cares[1], and b) doesn't realize they're clicking through something they don't understand. After all, they do it all the time on EULAs and when they ignore their "check engine" light. Could the message explain the problem better? Maybe, but when you characterize the user the way the parent did, you're not going to stop there, you're going to make them jump through all sorts of hoops or just outright deny the ability all together in the name of saving them from themselves, and that's a huge pain in the ass for the people who do know what's going on and are just trying to get some shit done and use their computer as the tool it was meant to be. [1]Even if the user knew what it was saying it seems unlikely that they'd think it was malicious. They trust blizzard enough to install their software anyway, so if blizzard says they need this thing, why wouldn't they say ok?
5ilv3r 9y ago
A root lets you make a valid cert for any domain. It can be used to create a man-in-the-middle attack if paired with a proxy.

by ng12 9y ago

AnIdiotOnTheNet 9y ago

What I'm saying is: why do you people always assume the average user of a desktop computer is a drooling moron? Because that's what you're doing when you say shit like this. Thinking like that is what gave us forced automatic updates.

ng12 9y ago
I don't agree with your characterization as somebody who doesn't understand the significance of a root CA as a drooling idiot. The text of one of your post's siblings is: > A root lets you make a valid cert for any domain. It can be used to create a man-in-the-middle attack if paired with a proxy. If you were to walk down the street tomorrow and ask 10 people to define "cert", "domain", "MITM", and "proxy" I'd wager you'd get 0 correct responses. I'd also wager those 10 people use computers every day -- and I don't think that's a problem. You shouldn't have to study and understand byzantine systems just to use a computer.
- AnIdiotOnTheNet 9y ago
  What I disagree with is the characterization of the user as someone who a) cares[1], and b) doesn't realize they're clicking through something they don't understand. After all, they do it all the time on EULAs and when they ignore their "check engine" light. Could the message explain the problem better? Maybe, but when you characterize the user the way the parent did, you're not going to stop there, you're going to make them jump through all sorts of hoops or just outright deny the ability all together in the name of saving them from themselves, and that's a huge pain in the ass for the people who do know what's going on and are just trying to get some shit done and use their computer as the tool it was meant to be. [1]Even if the user knew what it was saying it seems unlikely that they'd think it was malicious. They trust blizzard enough to install their software anyway, so if blizzard says they need this thing, why wouldn't they say ok?

5ilv3r 9y ago

A root lets you make a valid cert for any domain. It can be used to create a man-in-the-middle attack if paired with a proxy.