Re: WebAPI meta: permission prompts considered harmful

2012-04-24 Thread Adrienne Porter Felt
On Fri, Apr 20, 2012 at 11:13 AM, Mounir Lamouri wrote: > On 04/20/2012 10:58 AM, Adrienne Porter Felt wrote: > > You can theoretically use Intents to send something silently in the > > background, or you can use Intents to open a full-screen SMS dialog that > is > > pre-populated where the user

Re: WebAPI meta: permission prompts considered harmful

2012-04-20 Thread Kyle Hamilton
Suggestion: "Program is attempting to on . If you expected it to, tap here. If not, tap below." Then, if the same permission dialog keeps happening at the same point in the same process, and the user has never said "no", allow the option to save a "just say yes" or "just say no" for that

Re: WebAPI meta: permission prompts considered harmful

2012-04-20 Thread Mounir Lamouri
On 04/20/2012 10:58 AM, Adrienne Porter Felt wrote: > You can theoretically use Intents to send something silently in the > background, or you can use Intents to open a full-screen SMS dialog that is > pre-populated where the user just hits "Send". Which do you mean? I think > the former is a bad

Re: WebAPI meta: permission prompts considered harmful

2012-04-20 Thread Adrienne Porter Felt
> > > Even if that does not end up being the best approach for the Camera API, > > such a UI element might be useful elsewhere (e.g., as an option for SMS > > apps that don't want a full-screen SMS approval dialog). > > When does SMS app have to show a full-screen SMS approval dialog? > Regular con

Re: WebAPI meta: permission prompts considered harmful

2012-04-20 Thread Mounir Lamouri
On 04/19/2012 03:22 PM, Adrienne Porter Felt wrote: > I assert that it is possible to build a "magic button", although it will > require care. An application puts a placeholder like > in order for the element to appear, and CSS cannot be applied to the > element. Its z-index is fixed at the high

Re: WebAPI meta: permission prompts considered harmful

2012-04-19 Thread Adrienne Porter Felt
On Wed, Apr 18, 2012 at 12:14 PM, Mounir Lamouri wrote: > The general idea of using buttons seems quite odd and rather not secure. > What make secure is clearly not the button it's the > fact that it shows a UI that tells the user to select a file. That UI is > from the OS so the user knows it a

Re: WebAPI meta: permission prompts considered harmful

2012-04-18 Thread Mounir Lamouri
On 04/17/2012 10:35 PM, Jim Straus wrote: > What does an upload button look like (that is distinguishable from other > buttons?) How does the upload communicate where it is going to upload that is > not spoof-able by an application? Can an upload button protect from an app > uploading other inf

Re: WebAPI meta: permission prompts considered harmful

2012-04-17 Thread ianG
On 18/04/12 04:18 AM, Zack Weinberg wrote: I feel very strongly that we should initially attempt to design a system where there are no install-time permission prompts, and more generally, no prompts for which "remember this decision" is a desirable option. As Adrienne has been pointing out, perm

Re: WebAPI meta: permission prompts considered harmful

2012-04-17 Thread Jim Straus
I like the original thinking that is going into trying to avoid specific permission prompts and use implied consent. I have some questions and concerns, so I'm going to go through a scenario and see if I'm understanding correctly and solicit thoughts on some issues. Scenario: A camera that ta

Re: WebAPI meta: permission prompts considered harmful

2012-04-17 Thread Adrienne Porter Felt
+1 to everything Zack said Standard runtime dialogs that ask for Allow/deny are familiar, so system designers seem to like them -- but a lot of literature establishes that they don't work. Android tried moving them to install-time, which works for a small minority of users sometimes. Unfortunatel

WebAPI meta: permission prompts considered harmful

2012-04-17 Thread Zack Weinberg
I feel very strongly that we should initially attempt to design a system where there are no install-time permission prompts, and more generally, no prompts for which "remember this decision" is a desirable option. As Adrienne has been pointing out, permissions dialogs in general do not work.