11–20 of 375 posts
Yikes. Now consider this: this is the design for the missile warning system. It is possible, even likely, that some missile launch system has similar catastrophic UI. How we've not wiped ourselves off by accident so far is a miracle.
[1] - https://en.wikipedia.org/wiki/Command_and_Control_(book)
Is this design horrible? yes. Is this out of the ordinary? Absolutely not. This is very common UX for systems designed 5+ years ago and there are still systems designed today that look like this.
This is an alert system, now picture your surgeon or air traffic control using something like this...
Or they don't get it and they are hopeless.
No, they do get it. The DRILL link is one row away from non-DRILL link to avoid incorrect dispatching. In the mean time you can ponder if you need to announce a tsunami.
Holy hell... I was expecting some old ncurses mainframe design with shitty interface, but if it's just an href... seems like it'd be trivial to hack and cause havoc
Gives a whole new meaning to critical vulnerabilities. Sheesh.
Yikes. Now consider this: this is the design for the missile warning system. It is possible, even likely, that some missile launch system has similar catastrophic UI. How we've not wiped ourselves off by accident so far is a miracle.
The problem is not knowing (or having someone who knows) how to design something better, it's treating good design as a priority. It rarely happens.
Holy hell... I was expecting some old ncurses mainframe design with shitty interface, but if it's just an href... seems like it'd be trivial to hack and cause havoc
I really, really hope there’s no JS on that page. Because if there is, given the poor design, it’s probably vulnerable to XSRF. Gives a whole new meaning to critical vulnerabilities. Sheesh.
A site is vulnerable to XSRF if it doesn't use tokens when performing critical operations, critical operations are (usually) performed using HTTP POST, which can be done via form submission... token generation and validation is done server side...
You can perform a successful XSRF attack in a browser with javascript completely disabled.