2 ms·
> I don't really see any issue with that. You don't see an issue with a barrage of prompts that users have been conditioned to blindly accept? > I mean that's
by troupo 3y ago
> I don't really see any issue with that.
You don't see an issue with a barrage of prompts that users have been conditioned to blindly accept?
> I mean that's how Android and iOS work and it seems to work quite well in practice.
It doesn't work that well in practice.
This is an older study, but the results in section 7 remain as relevant: https://cups.cs.cmu.edu/soups/2012/proceedings/a3_Felt.pdf https://cups.cs.cmu.edu/soups/2012/proceedings/a3_Felt.pdf
- IshKebab 3y ago> You don't see an issue with a barrage of prompts that users have been conditioned to blindly accept? No, for two reasons: 1. This isn't like "are you sure you wish to run this program that you just downloaded?" where you pretty much have zero reason to ever say no. If a torrent site asks for USB access I'm going to say no. If a firmware update site asks, I'll say yes. It's easily actionable. 2. No sites ask for all of those permissions. At most they ask for one or two.
- troupo 3y ago> . If a torrent site asks for USB access I'm going to say no You keep pretending that only torrent sites (or scammy sites) will be asking for this. Here's an ad network on a legitimate site asking for access to MIDI:https://x.com/denschub/status/1582730985778556931 https://x.com/denschub/status/1582730985778556931 > No sites ask for all of those permissions. You don't have to ask for all permissions. There are so many permissions that you only need a subset
- madeofpalk 3y agoThe is the problem that browser vendors work with: ad networks loading arbitrary JavaScript on otherwise “reputable” website. You shouldn’t be browsing NYT and be presented with a “Set my printer on fire?” button.