Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

1) Make an argument. This isn’t one.

2) Why suggest a prompt that doesn’t give the user an understanding of what they are being asked and why it matters?



Implicit information is what allowed millions of devices to be infected via AUTORUN.INF files causing billions of dollars in damage.

People think in ways of making things simple and easy, but you end up harming people. It's a leaky abstraction of trust.

This would fall into the same category. You don't expect risk from a MP3. But then it's not an MP3, it's a NSF.


and continuously prompting people for input is a good way to train them to always click "Yes".

https://www.nist.gov/news-events/news/2016/10/security-fatig...


Would not be fatigue. If the extension is mp3 and the detected type is mp3, no need to show a dialog. Only show a dialog if there might be something phony going on.




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: