3 ms·

Wow what a neat little trick!

by lxe 5y ago

Wowfunhappy 5y ago
"Neat" is one word for it, sure. It's nothing wrong with a user deciding "I realize something is wrong, and I shouldn't trust that anything on this website is legitimate, and I shouldn't give it any information, but I'd still like to read the story/article/blog." There should be a low-opacity button inside the "Advanced" menu.
- Waterluvian 5y ago
  They added a button in the form of a hackers only keyboard command. Engineers can be so out of touch sometimes.
- judge2020 5y ago
  I have a button there: https://i.judge.sh/each/Star/chrome_qziy165xYV.png https://i.judge.sh/each/Star/chrome_qziy165xYV.png But if the button isn't there, that's probably because w3 has HSTS enabled (for past visitors), which tells the browser to never load unencrypted. The `thisisunsafe` workaround is there to be a middle ground between actually making it impossible to load and preventing users loading an unsecure page when they shouldn't.
- wearywanderer 5y ago
  People don't read buttons. However, I share your disdain for Chrome's chosen method; it's very gate-keepery. It requires you to be "in the know"; those who understand the danger but haven't heard of the trick are deliberately left out. I think a reasonable compromise would be a button that pulls up a dialog prompting you to type out a consent message. The dialog tells you what to write instead of keeping this as esoteric knowledge, but the user is still compelled to at least read the warning instead of blindly pressing buttons.
  - bawolff 5y ago
    Compare to firefox which has no bypass. This is the sort of thing, if you're not in the know than you probably dont understand the consequences.
    - wearywanderer 5y ago
      > This is the sort of thing, if you're not in the know than you probably dont understand the consequences. Understanding the premise and importance of HTTPS and knowing about some esoteric hidden UX of some Google software are not at all the same thing.
- bigyikes 5y ago
  Kinda agree, but they don't have a button probably to prevent people from habitually pressing the button to continue. Training your users to bypass security measures is not good security.
  - eru 5y ago
    For the same UI related reasons that makes confirmation dialogs useless. (For them, undo is a much better replacement. Even gmail's 'fake' undo for unsending email.)

Wow what a neat little trick!

by lxe 5y ago

Wow what a neat little trick!

"Neat" is one word for it, sure. It's nothing wrong with a user deciding "I realize something is wrong, and I shouldn't trust that anything on this website is legitimate, and I shouldn't give it any information, but I'd still like to read the story/article/blog." There should be a low-opacity button inside the "Advanced" menu.

Waterluvian 5y ago
They added a button in the form of a hackers only keyboard command. Engineers can be so out of touch sometimes.
judge2020 5y ago
I have a button there: https://i.judge.sh/each/Star/chrome_qziy165xYV.png https://i.judge.sh/each/Star/chrome_qziy165xYV.png But if the button isn't there, that's probably because w3 has HSTS enabled (for past visitors), which tells the browser to never load unencrypted. The `thisisunsafe` workaround is there to be a middle ground between actually making it impossible to load and preventing users loading an unsecure page when they shouldn't.
wearywanderer 5y ago
People don't read buttons. However, I share your disdain for Chrome's chosen method; it's very gate-keepery. It requires you to be "in the know"; those who understand the danger but haven't heard of the trick are deliberately left out. I think a reasonable compromise would be a button that pulls up a dialog prompting you to type out a consent message. The dialog tells you what to write instead of keeping this as esoteric knowledge, but the user is still compelled to at least read the warning instead of blindly pressing buttons.
- bawolff 5y ago
  Compare to firefox which has no bypass. This is the sort of thing, if you're not in the know than you probably dont understand the consequences.
  - wearywanderer 5y ago
    > This is the sort of thing, if you're not in the know than you probably dont understand the consequences. Understanding the premise and importance of HTTPS and knowing about some esoteric hidden UX of some Google software are not at all the same thing.
bigyikes 5y ago
Kinda agree, but they don't have a button probably to prevent people from habitually pressing the button to continue. Training your users to bypass security measures is not good security.
- eru 5y ago
  For the same UI related reasons that makes confirmation dialogs useless. (For them, undo is a much better replacement. Even gmail's 'fake' undo for unsending email.)