2 ms·
> Another thing I wish they would do is provide an infallible way to verify system password request dialogs. You are requesting trusted path (https://en.wikipe
by yabadabadoes 7y ago
> Another thing I wish they would do is provide an infallible way to verify system password request dialogs.
You are requesting trusted path (https://en.wikipedia.org/wiki/Trusted_path https://en.wikipedia.org/wiki/Trusted_path) for windows the ctrl-alt-delete sequence is apparently used to implement their trusted path, so it should have been designed to foreground its own active windows, minimize non trusted windows, or similar.
- als0 7y agoIn my experience, Trusted path and Trusted UI tend to fail due to significant UX challenges. It tends to be quirky and require user training.
- yabadabadoes 7y agoIn my experience, this could be said for virtually every security feature, particularly when new to users. But I still find it worthwhile to fully/correctly implement security features even if they might not be correctly used. Many correct security features have gradually become commonly understood in most communities to everyone's benefit, while most short cuts have eventually caused major problems that are made doubly bad by reputable firms having invested in training users to accept a solution that could only be implemented in snake oil.