3 ms·
I guess this is a difference in philosophy then, but I think that the goal of security engineering should be to protect users from malicious actors, not to prot
by terminalshort 1y ago
I guess this is a difference in philosophy then, but I think that the goal of security engineering should be to protect users from malicious actors, not to protect them from their own bad choices. If I give you a safety feature, and you turn it off, that's not my problem. There is a special level of hatred that I have reserved only for the busybodies who limit my choices and justify it as protecting me.
That said, your point about messaging is really good, and so many times I see security warnings I roll my eyes at how badly the message is written.
- degamad 1y agoI agree that our choices should not be limited to protect us. However, we need a better solution than pop-up warnings. I guarantee that you have clicked through a pop-up warning that was standing between you and the thing that you wanted to do (as have I, and everyone else who has used a computer for more than a day). We very quickly learn that most warnings aren't going to affect us, and that they're just saying "are you sure" to things that we're already sure of. We've all selected a file, hit the delete key, got the pop-up saying "are you sure you want to delete wrong_file.txt", hit "yes" (because we always have to hit yes after hitting delete), then looked at the outcome and thought "oh, that was the wrong file" too late...
- dgoldstein0 1y agoWhich is why the default is often move to trash these days, or includes an undo option for a bit instead of a confirmation dialog. But some actions are pretty hard to undo (eg installing malware), so the issue in general stands.