3 ms·

> doesn't seem unreasonable for them to just give a popup authorisation for web serial Just a pop up for camera Just a popup for microphone Just a popup for

by troupo 3y ago

> doesn't seem unreasonable for them to just give a popup authorisation for web serial Just a pop up for camera Just a popup for microphone Just a popup for location Just a popup for notifications Just a popup for Web Serial Just a popup for Web USB Just a popup for Web MIDI Just a popup for Web HID Just a popup for Web Bluetooth Just a popup for File System Access Just a popup for Network Information Just a popup for Web NFC Just a popup for ...

IshKebab 3y ago
I don't really see any issue with that. What's the specific problem? I mean that's how Android and iOS work and it seems to work quite well in practice.
- troupo 3y ago
  > I don't really see any issue with that. You don't see an issue with a barrage of prompts that users have been conditioned to blindly accept? > I mean that's how Android and iOS work and it seems to work quite well in practice. It doesn't work that well in practice. This is an older study, but the results in section 7 remain as relevant: https://cups.cs.cmu.edu/soups/2012/proceedings/a3_Felt.pdf https://cups.cs.cmu.edu/soups/2012/proceedings/a3_Felt.pdf
  - IshKebab 3y ago
    > You don't see an issue with a barrage of prompts that users have been conditioned to blindly accept? No, for two reasons: 1. This isn't like "are you sure you wish to run this program that you just downloaded?" where you pretty much have zero reason to ever say no. If a torrent site asks for USB access I'm going to say no. If a firmware update site asks, I'll say yes. It's easily actionable. 2. No sites ask for all of those permissions. At most they ask for one or two.
    - troupo 3y ago
      > . If a torrent site asks for USB access I'm going to say no You keep pretending that only torrent sites (or scammy sites) will be asking for this. Here's an ad network on a legitimate site asking for access to MIDI:https://x.com/denschub/status/1582730985778556931 https://x.com/denschub/status/1582730985778556931 > No sites ask for all of those permissions. You don't have to ask for all permissions. There are so many permissions that you only need a subset
      - madeofpalk 3y ago
        The is the problem that browser vendors work with: ad networks loading arbitrary JavaScript on otherwise “reputable” website. You shouldn’t be browsing NYT and be presented with a “Set my printer on fire?” button.

by troupo 3y ago

IshKebab 3y ago

I don't really see any issue with that. What's the specific problem? I mean that's how Android and iOS work and it seems to work quite well in practice.

troupo 3y ago
> I don't really see any issue with that. You don't see an issue with a barrage of prompts that users have been conditioned to blindly accept? > I mean that's how Android and iOS work and it seems to work quite well in practice. It doesn't work that well in practice. This is an older study, but the results in section 7 remain as relevant: https://cups.cs.cmu.edu/soups/2012/proceedings/a3_Felt.pdf https://cups.cs.cmu.edu/soups/2012/proceedings/a3_Felt.pdf
- IshKebab 3y ago
  > You don't see an issue with a barrage of prompts that users have been conditioned to blindly accept? No, for two reasons: 1. This isn't like "are you sure you wish to run this program that you just downloaded?" where you pretty much have zero reason to ever say no. If a torrent site asks for USB access I'm going to say no. If a firmware update site asks, I'll say yes. It's easily actionable. 2. No sites ask for all of those permissions. At most they ask for one or two.
  - troupo 3y ago
    > . If a torrent site asks for USB access I'm going to say no You keep pretending that only torrent sites (or scammy sites) will be asking for this. Here's an ad network on a legitimate site asking for access to MIDI:https://x.com/denschub/status/1582730985778556931 https://x.com/denschub/status/1582730985778556931 > No sites ask for all of those permissions. You don't have to ask for all permissions. There are so many permissions that you only need a subset
    - madeofpalk 3y ago
      The is the problem that browser vendors work with: ad networks loading arbitrary JavaScript on otherwise “reputable” website. You shouldn’t be browsing NYT and be presented with a “Set my printer on fire?” button.