4 ms·
The even worse version of this is dialogue windows suddenly popping into focus. You're writing an email and suddenly your whitespace ends up "yes"ing a file ove
by generationP 4y ago
The even worse version of this is dialogue windows suddenly popping into focus. You're writing an email and suddenly your whitespace ends up "yes"ing a file overwrite. Windows is rather bad at these; browsers seem to be better by keeping these dialogues local to the tabs at least.
- deleted 4y ago[deleted]
- kazinator 4y agoISTR there is some registry setting that may help with this. Search the web for ForegroundLockTimeout.
- Jerrrry 4y agoFirefox has added a small delay to prevent this exploit. Chrome has responded that it has yet to have been detected and weaponized yet. Imagine a small game where you must press the [Enter] key rapidly. Would you, with a few similar boxes in game to detract, notice the Open_Folder_DialogBox for a few frames? Probably not in time to not hit the [Enter] key, giving the webpage's javascript full permissions to everything in the default, selected Folder...which is the C: drive.
- dspillett 4y ago> Firefox has added a small delay to prevent this exploit. This can be a mild irritation in FF. In other contexts it could be very irritating. The problem with blocking user action for the user's safety is that most users don't appreciate it until they do something wrong (by which point I've found the option to turn the protection off!)
- Jerrrry 4y agoA trivial band-aid, such as only delaying the input if the user has repeatedly pressed the [Enter] button in the last 3 seconds, could thwart naive attempts. A clever bypass would be to have the [Enter] button be pressed when reacting to something on screen, such as an incoming guitar strum or a dinosaur hopping over a cactus, then throw the OpenFileDialog before the goal/expected [Enter] keypress.
- LudwigNagasena 4y agoActually there were scam games like that back in the era of Symbian Java Apps. You click-click-click and then a window asking you to send an expensive sms pops up.
- Doxin 4y agoWhich is exactly why various window managers on linux have "focus stealing prevention" settings. E.g. in compiz you can tell it how hard to prevent focus stealing. On the strictest setting applications simply cannot steal focus. On lower settings it will prevent focus changing for a few seconds after typing or clicking. The window manager I use doesn't even have the concept of applications taking focus. When they try the window border simply turns red instead. It's great. Now if only they'd have some way to make newly opened windows not entirely clobber your window layout it'd be perfect.