3 ms·

It doesn't matter who the permissions are for, the principle is the same. _Should_ users perform a through investigation of every app they install, checking th

It doesn't matter who the permissions are for, the principle is the same. _Should_ users perform a through investigation of every app they install, checking that it does exactly what they expect and no more? Perhaps; but that's not really practical. The same applies for developers. Should these sites review the source code of every ad they embed in an iframe, whitelisting each ad individually? Maybe, but that's not going to happen. The other commenters are right, what you're suggesting is fantasy, not pragmatic reality. Permissions systems are better, because they prevent misbehavior even when manual review fails.

Someone1234 8y ago
> It doesn't matter who the permissions are for, the principle is the same. It absolutely matters. Users should have minimal responsibility while consuming content. Site owners should have major responsibility while providing content. > Should these sites review the source code of every ad they embed in an iframe, whitelisting each ad individually? They absolutely should know who their ad platform is, what their policies are, and what is/isn't acceptable for an ad hosted by that platform. If their ad platform falls short, they should shop around for a better alternative.
- prophesi 8y ago
  > They absolutely should know who their ad platform is, what their policies are, and what is/isn't acceptable for an ad hosted by that platform. If their ad platform falls short, they should shop around for a better alternative. ... Or you could choose a wholesome ad network (if such a thing exists), AND limit what features they can access just in case something goes awry and a malicious ad somehow makes it through.
- Ajedi32 8y ago
  > If their ad platform falls short, they should shop around for a better alternative. That's like suggesting users not use the app store anymore because sometimes malware slips through the review process. All major ad networks will occasionally have ads which violate their written policies. Google, for example, bans millions of ads every year for that reason ( https://www.blog.google/technology/ads/how-we-fought-bad-ads-sites-and-scammers-2016/ https://www.blog.google/technology/ads/how-we-fought-bad-ads... ). The solution to that isn't to just ditch those ad platforms entirely.
  - phobosdeimos 8y ago
    The solution is to block all ads until site owners start to take responsibility. As a user I couldn't care less about the hardships of the site owner.

Someone1234 8y ago

> It doesn't matter who the permissions are for, the principle is the same. It absolutely matters. Users should have minimal responsibility while consuming content. Site owners should have major responsibility while providing content. > Should these sites review the source code of every ad they embed in an iframe, whitelisting each ad individually? They absolutely should know who their ad platform is, what their policies are, and what is/isn't acceptable for an ad hosted by that platform. If their ad platform falls short, they should shop around for a better alternative.

prophesi 8y ago
> They absolutely should know who their ad platform is, what their policies are, and what is/isn't acceptable for an ad hosted by that platform. If their ad platform falls short, they should shop around for a better alternative. ... Or you could choose a wholesome ad network (if such a thing exists), AND limit what features they can access just in case something goes awry and a malicious ad somehow makes it through.
Ajedi32 8y ago
> If their ad platform falls short, they should shop around for a better alternative. That's like suggesting users not use the app store anymore because sometimes malware slips through the review process. All major ad networks will occasionally have ads which violate their written policies. Google, for example, bans millions of ads every year for that reason ( https://www.blog.google/technology/ads/how-we-fought-bad-ads-sites-and-scammers-2016/ https://www.blog.google/technology/ads/how-we-fought-bad-ads... ). The solution to that isn't to just ditch those ad platforms entirely.
- phobosdeimos 8y ago
  The solution is to block all ads until site owners start to take responsibility. As a user I couldn't care less about the hardships of the site owner.