> If they approve, the settings open, then the user has to find the specific little toggle and enable it. Another security prompt then done. Why isn’t this at most 2 prompts? Answer: Because modern-day Apple has subscribed to a particular brand of mitigation for the "noobs will always click 'Allow' especially if you ask them to first" problem. The mitigation is that Apple just dumps you on step 2 of a little 4-5 step…
I oftentimes think that as a nerd, it's easy to walk around like my shit doesn't stink, but then I realize I too have been the victim of clicking through popups mindlessly and probably have done some 'risky computing stuff' I'm unaware of beyond that.
As nerds, do we have a higher capacity to fix a mess than a grandma? Sure, probably, but that doesn't mean that we don't make messes.
> As a complete nerd, you'd think maybe I'd like that I can prove my skills like this, but it comes off as deeply disrespectful to me as the user that I can't disable this. You seem to have understood the problem. But then you didn't follow. If there was a way to disable this, first thing that the grandma would do is watch a video how to disable that and lose security from then on. Of course it is not perfect, but th…
Their approach is not decent. There should be some kind of master key to get full admin access. Leaving al the keys in the hand of a mega corporation is asking for trouble. It's gone so far that even tech people now think that having root access to a mobile device is somehow scary. Well guess what that root access is still there for the manufacturer. It needs it for stuff like updates. It just shields you from having…
Doesn't the government already have root to whatever machine via the NSA? It's the downstream government, the state-level governments that are squeaky wheels with the age verification and other nonsense.
The window (miss)management of MacOS is what's holding me from switching to Mac. I've already tried Aerospace and similar solutions, but I can't replicate the fast and unobstructed experience I have with i3wm.
Sadly wm in MacOS is like notifications on iOS: with enough time you get used to the unproductive mess they are, but you'll be missing out on better solutions. And since probably all MacOS devs are using Mac, they won't see/understand other (better) approaches.
> If they approve, the settings open, then the user has to find the specific little toggle and enable it. Another security prompt then done. Why isn’t this at most 2 prompts? Answer: Because modern-day Apple has subscribed to a particular brand of mitigation for the "noobs will always click 'Allow' especially if you ask them to first" problem. The mitigation is that Apple just dumps you on step 2 of a little 4-5 step…
The scary thing to me is how Apple makes you jump through hoops to install or use any sort of app, but when it comes to adding items to your login items, they don't even require you to grant permission. Tried some little throwaway app and realized you don't need it? Sucks for you. It added itself to your login items and it'll start up in the background every single time you turn on your computer. And it won't even te…
I like the app ‘Lingon X’ I think is the name, to help with this. It’s a viewer/editor for all the startup and recurrent background tasks on your Mac. But also it has a feature to notify you of any edits/additions to the startup/background items that I otherwise wouldn’t have known about.
See https://en.wikipedia.org/wiki/Bonneville_Salt_Flats — the salt flats are extremely flat (as the name implies), and because of all the salt, no vegetation can survive. Look at the pictures: there are no trees, no grass, no hiding places at all. Anyone standing (or even lying prone) on the salt flats is visible to anyone else for miles around. GP was saying that systems should be "transparent enough that a compromi…
I don’t think the analogy was the issue. What does it mean for a system to be so transparent that it’s obvious when it’s compromised?
I was thinking it would even go so far as to make the background red if it failed some heuristics.
Yes, and I'd go a step further: OSes in general need a concept of a 'project' or 'task' or whatever, which a) cuts across apps and b) integrates deeply with windowing and spaces. Multitasking and context switching has been increasing for years, instant messaging boosted them again, and agent-based workflows are only going to push further in that direction. The OS needs to support that, and it's not an app-level conce…
KDE tries to do this with Activities¹ (I personally haven't found it useful).
> As a complete nerd, you'd think maybe I'd like that I can prove my skills like this, but it comes off as deeply disrespectful to me as the user that I can't disable this. You seem to have understood the problem. But then you didn't follow. If there was a way to disable this, first thing that the grandma would do is watch a video how to disable that and lose security from then on. Of course it is not perfect, but th…
Could make it disable-able only from the terminal in recovery mode. That one would be too hard / bothersome to fend off most cases I feel like
Did you know that Facebook actually has a message styled with color and different font sizes that pops up in the browser console when you open the inspector for Facebook.com with instruction not to paste things you're told to paste there, with a link to https://www.facebook.com/selfxss for more information?
I’m convinced that the biggest threat to good UIs are the majority of professional UI designers. Think of it this way… Half of all UI designers are below the median. These people chose UI design as a career. You don’t advance your career by simply defending the status quo year after year. To advance you need to design something new. So, you do. You do whether whatever was there before is working well or not. Because…
This assumes that every designer is on the bell curve at the big tech firms in the roles that can influence this. I am not defending modern UI/UX, but that is quite an assumption.
You're right, it is a big assumption, but it's not unfounded. I've worked at F50 companies and founded my own startup. It's a lot easier to get two really great designers from the far right side of the bell curve when you're a small startup. As an organization reaches even 1000 people, you're now starting to draw from the middle of the bell curve. In fact, you have to. If you try to hire only from the far right of the bell curve for all positions, you end up with a lot of egos that will clash. In the best case, you hire leaders from the far right of the bell curve and followers from the middle. But at some point those mediocre followers start asking for promotions and your hotshot leader leaves for greener pastures. Controlling for that in your hiring practices at a large organization is virtually impossible, particularly if you have standard (middle of the bell curve) HR people. BTW, this is exactly why startups out-execute large companies every day of the week. A small startup can carefully control its hiring, select from the right side of the bell curve, and avoid all the large company HR crap. But as soon as it starts to scale, the bell curve becomes a looming threat.
Yes, and I'd go a step further: OSes in general need a concept of a 'project' or 'task' or whatever, which a) cuts across apps and b) integrates deeply with windowing and spaces. Multitasking and context switching has been increasing for years, instant messaging boosted them again, and agent-based workflows are only going to push further in that direction. The OS needs to support that, and it's not an app-level conce…
I feel like Arc nailed this perfectly with the vertical tabs and multiple "spaces", and since almost everything happens in-browser these days, this was 99% good enough. I can't understand why more power users don't find this setup ideal. I'm hoping Zen Browser can become a solid replacement.
Honestly, I think the permissions model for desktop and laptop computers is way too permissive to begin with, I think it just kinda sucks and doesn’t do its job. Apple is kind of fixing it but there is a long way to go. There have been alarm bells ringing in my head for a long time with all these settings, and the fact that they’re buried in the settings app gives me a lot of peace of mind. I’ll click through a lot o…
> I think the permissions model for desktop and laptop computers is way too permissive to begin with Well, if you feel that way, they do make platforms that sound like a better fit: iPad, iOS, even Android kinda fits that mold. I would call them "toy computers" but that is my bias. It's not a real computer to me if I am not even in control of what code runs on it.
Ah, I can see what you’re getting at. There is actually a system which is a better fit for me, which is the Mac. I can still run the software I want on it, and even though the security model isn’t tight enough, it’s improving.
Linux is also doable, but there’s extra work involved with setting up separate user accounts for running specific pieces of software, configuring namespaces for those processes, that sort of thing. But this is backwards. I’d rather start with a secure default state and have to configure exceptions. Back in the day I could get that from SELinux strict policies but it seems like those have fallen by the wayside.