3 ms·

Note: I just tried the demo [0], and no obvious prompt showed up, instead it was a tiny window [1] on the bottom right of my screen, which only showed up for a

Note: I just tried the demo [0], and no obvious prompt showed up, instead it was a tiny window [1] on the bottom right of my screen, which only showed up for a couple seconds and is easy to miss. [0]: https://schemeflood.com/ https://schemeflood.com/ [1]: https://imgur.com/a/YqbbfPt https://imgur.com/a/YqbbfPt

akersten 5y ago
Yeah, that was the popup I was referencing - although it's much smaller for you than it was for me - maybe my low res laptop screen is a benefit there. It was noticable enough to clue me that something weird was afoot, but I'm sure it could be disguised further. I think a fix could be: always show a select-program prompt even for unknown schemes (perhaps with a built-in link to the add-ons store a la Windows to find a program to open the "file" ;) ), never fail to a different page context than a successful launch would go to, and make the don't-ask-again checkbox domain specific to prevent random domains doing drive-by automatic launch detection. That seems to solve it without being too disruptive to existing convenience.
- jonnycomputer 5y ago
  I think so. I tried it on my imac, and I didn't notice it until my second go.
Semaphor 5y ago
I have FF set up to open all popups in new tabs. That makes it a lot more noticeable ;)
- chii 5y ago
  this should be the default behaviour imho - there should never really be a situation where a new window popup is going to be better than a tab.
  - deleted 5y ago
    [deleted]
  - Semaphor 5y ago
    I have to disagree there. It makes paypal payments really ugly, that is most certainly not what a normal user wants ;)
    - lucideer 5y ago
      That's on paypal, and is something they would likely have fixed already if it were the default behaviour. As for what normal users want, I would presume most of them would want to be safer on the web.
- simondotau 5y ago
  I do this too. It's also a massive usability win for those annoying websites (usually banking or government) that insist upon a full screen pop-up window to hide the navigation controls and URL bar.
- zuhsetaqi 5y ago
  Which setting does this? Is it „Open links in tabs instead of windows“?
  - worble 5y ago
    I don't know if it's available in the UI, but in about:config set browser.link.open_newwindow.restriction to 0
worble 5y ago
Every time I run the demo, it gives me a different result? This is just on the same browser (Firefox), it generates a different code every time and claims I have random applications installed that I don't (the only one I have on that list is steam, which it does seems to consistently report at least). Not sure if one of my extensions is interfering with it.
pimterry 5y ago
I'm using a tiling window manager and it's very hard to miss: each attempt opens a new window that resizes the browser and takes up half the screen. On the other hand, I guess they could automatically measure the window size in the popups and use this to detect tiling window managers, which gives them another (albeit noisy) bit for fingerprinting...
- swiley 5y ago
  The large number of incompatible desktop Linux configurations have underrated security benefits.

akersten 5y ago

Yeah, that was the popup I was referencing - although it's much smaller for you than it was for me - maybe my low res laptop screen is a benefit there. It was noticable enough to clue me that something weird was afoot, but I'm sure it could be disguised further. I think a fix could be: always show a select-program prompt even for unknown schemes (perhaps with a built-in link to the add-ons store a la Windows to find a program to open the "file" ;) ), never fail to a different page context than a successful launch would go to, and make the don't-ask-again checkbox domain specific to prevent random domains doing drive-by automatic launch detection. That seems to solve it without being too disruptive to existing convenience.

jonnycomputer 5y ago
I think so. I tried it on my imac, and I didn't notice it until my second go.

Semaphor 5y ago

I have FF set up to open all popups in new tabs. That makes it a lot more noticeable ;)

chii 5y ago
this should be the default behaviour imho - there should never really be a situation where a new window popup is going to be better than a tab.
- deleted 5y ago
  [deleted]
- Semaphor 5y ago
  I have to disagree there. It makes paypal payments really ugly, that is most certainly not what a normal user wants ;)
  - lucideer 5y ago
    That's on paypal, and is something they would likely have fixed already if it were the default behaviour. As for what normal users want, I would presume most of them would want to be safer on the web.
simondotau 5y ago
I do this too. It's also a massive usability win for those annoying websites (usually banking or government) that insist upon a full screen pop-up window to hide the navigation controls and URL bar.
zuhsetaqi 5y ago
Which setting does this? Is it „Open links in tabs instead of windows“?
- worble 5y ago
  I don't know if it's available in the UI, but in about:config set browser.link.open_newwindow.restriction to 0

worble 5y ago

Every time I run the demo, it gives me a different result? This is just on the same browser (Firefox), it generates a different code every time and claims I have random applications installed that I don't (the only one I have on that list is steam, which it does seems to consistently report at least). Not sure if one of my extensions is interfering with it.

pimterry 5y ago

I'm using a tiling window manager and it's very hard to miss: each attempt opens a new window that resizes the browser and takes up half the screen. On the other hand, I guess they could automatically measure the window size in the popups and use this to detect tiling window managers, which gives them another (albeit noisy) bit for fingerprinting...

swiley 5y ago
The large number of incompatible desktop Linux configurations have underrated security benefits.