105 Comments
- detrate, on 10/12/2007, -85/+230seriously, I don't care if I get dugg down, you're all retarded if you didn't realize that.
- Cl1mh4224rd, on 10/12/2007, -2/+147Huh... My rationalization was, as the article points out, that it caused the user to actually *read* the dialog box instead of just clicking "Yes" out of reflex...
But, hey, I consider that security, too... - EasY_TargeT, on 10/12/2007, -3/+87actually rain falls from the clouds.
- Latka, on 10/12/2007, -14/+85But isn't it obvious? You don't have to be a power user to figure out what's going on.
- kuujjuaqguy, on 10/26/2007, -34/+94I'll digg that, i've always wondered why that happens. :)
- antoniojvr, on 10/12/2007, -4/+46You know what's funny? This is the same hostility I get when I go to a linux board and ask a questions. If you knew why it waits, MOVE ON. If you didn't Read on.
BUT QUIT THE BITCHING! - EGOvoruhk, on 10/12/2007, -9/+35Not everone is as smart as you, yes it's sad, I know
You bet hurry up and get offline so you can run down to the local elementary school so you can make fun of kids for not knowing their multiplication tables - inactive, on 10/12/2007, -1/+26Seriously.. I didn't know, and I am very computer literate. I only use 1-2 extensions anyways and I never bothered to care why I had to wait. talk about panties in a bunch..
- Wavey, on 10/12/2007, -1/+23I had someone ask me once if delays in programs like this were meant to "give the computer a rest every once in a while, so it doesn't download or something."
I think I remember wanting to slap him really hard. >:- - brendanc, on 10/12/2007, -2/+23Yeah, when I first installed an extension a year and a half or so ago, I thought to myself, "Hrm, that's actually a nice feature so something can't hijack itself into the browser instantly, unlike IE"
- Shroomie, on 10/12/2007, -13/+32Yeah, I thought everybody understood why it does that. It's a fairly simple concept.
- guregu, on 10/12/2007, -2/+20I have been installing firefox on people's computers whenever I fix them (after asking them of course). Most of them don't even have a clue what a browser is. I hear things like "I can't find my internet."
I think that we have to remember that not everybody that is using firefox is as tech-savvy as us. Granted, if they are reading this article after finding it on digg, then they are probably tech-savvy, but who knows. - scarper86, on 10/12/2007, -1/+15It's a pathetic attempt for a bunch of losers to actually feel superior to someone for one fraction of a minute in their tired little lives.
- freakofnature, on 10/12/2007, -4/+183 sec wait vs. nightmare?
Which do you choose? - Wavey, on 10/12/2007, -1/+14Well, you sort of sound retarded if you use "u" all the time instead of "you," or "enuff" instead of "enough," or use "your" instead of "you're," or forget to put the apostrophe in "hasn't."
- Aeiri, on 10/12/2007, -2/+14Because it doesn't have to be a shortcut, it could be the user hitting enter, or even tab, then enter, based on the way you set up your page.
I'm curious as to why this is news... I remember news articles everywhere including the front page of Mozilla when they added this security feature... - r121, on 10/12/2007, -0/+10But in those 3 seconds the user notices the software installation dialog and cancels it. The exploit relies on the user not even noticing it.
- Cablito, on 10/12/2007, -3/+12Vista does that conforming to the idea of not running your OS in "root" mode...
Funny how every linux troll always seems to say "you nooob running %kde% as root" and how stupid it is to be logged on as "root" or admnistrator.... now Vista does exactly that to protect you, and because its Microsoft it sucks. - Wavey, on 10/12/2007, -2/+11You know, I'm still not really clear on what specifically happens when you report something as "lame." I know that when people report something as "inaccurate," eventually (does it take a certain number of reports?) the article will have a warning on it that it's possibly inaccurate. But I've never seen any similar warnings that the article may possibly be lame and not worth your time. Can someone fill me in on that?
- AICkieran, on 10/12/2007, -3/+12Oh sweet sweet irony...
- qvtqht, on 10/12/2007, -0/+9This is designed to prevent accidental clicks, not intentional ones.
- inactive, on 10/12/2007, -0/+7This is also the way you CAN'T hit the OK button when downloading anything through Firefox, without giving the download windows focus first. It's to prevent programs from automatically injecting the OK code.
- HHarrelson, on 10/12/2007, -0/+5Man, this is an intense article. The most interesting part was this:
"I(t) surprises me that these users were not able to figure out the security hole given the fix. Ironically, advanced users are the most susceptible to these attacks, because they type and double-click faster than they react to unexpected stimuli." - allyant, on 10/12/2007, -21/+26Yes that is a good question!
I haven't really thought about it untill now
digg++ - silenceHR, on 10/12/2007, -0/+5i didnt think much about it. acctually i trusted FF to be safer then IE, so i prolly just took this as one of those things that make it safer, but i didnt know which exploit was it supposed to fight... now i know.
i never tried to put counter to 0, i cant believe some people did... i knew there was reason for it, just didnt wanna waste time in finding exactlly what, after all 3 seconds are not much for better security :D - MackPrime, on 10/12/2007, -0/+5i knew it was for security, but exactly why was unknown.
- mcottier, on 10/12/2007, -1/+6God, you are impatient!
- tgilber, on 10/12/2007, -1/+6Suprisingly old post (2004?), but I was curious, good read... I think people lessening the delay is quite stupid, the reasoning being that some folks "install lots of extensions." Come on, how many and how often are you installing extensions such that a 5 second delay for each one is an inconvenience worth hacking around?
I think the best fix for this is the status bar that pops down from the top of the window mentioning that a site is trying to do something... it prevents the malicious clicking, unless of course you got the user to click in the upper top right edge of the screen or something... - airstrike, on 10/12/2007, -1/+5"Then the user interface is inconsistent with... everything else, and is therefore essentially broken."
who the hell cares if it's inconsistent or not? it's ONE small change in ONE small dialog for the single purpose of improving security. do you honestly think they should allow the 'y' hotkey just because you can use the same shortcut somewhere else? give me a break. - falloutsyndrome, on 10/12/2007, -10/+14One of my favorite features! I had a hunch it was for security, glad to know it isn't there just to annoy me :P
- mdshort, on 10/12/2007, -0/+3As one of the few computer literate folks at my school, I'd have to say that people using computers have gotten addicted to that "click away" attitude, where users click yes or no instinctively without even perceiving what the warning is about. It pisses me off when I'm trying to troubleshoot a problem, and a partiuclar message pops up that happens to explain the problem is subconciously clicked away without giving me a chance to read or understand what it was about (at least, when I remember what it looked like).
I really did think that the reason above was why they added the delay, I never even thought about exploits such as the 'double click' or 'press enter' buttons. Hell, most users don't need help with getting that ***** anyways! Although I do think it could be a tad shorter, but I do understand that when developing an application that you always heed to the lowest common denomenator, and for alot of people it takes that long for them to realize the consquences of that particular action, if they even decide to think about it in the first place.
But cool read, digg++ (and I don't normally digg articles unless they are really good). - inactive, on 10/12/2007, -0/+3This is an interesting read, but I'd prefer it if they popped a toolbar instead. They already do so for me to whitelist that site. Why can't the whitelisting act as one smooth motion to whitelist and install?
- inactive, on 10/12/2007, -1/+4Then install the firefox plugin that disables the countdown.
- Ragzouken, on 10/12/2007, -0/+3Why shouldn't we dig you down for calling us retards, we don't 'digg' your opinion, and we don't 'digg' you. :D
- amire80, on 10/12/2007, -0/+3Excellent.
I also thought that "the delay was added merely to force everyone to read the dialog".
I couldn't imagine this kind of Trojan behaviour. Using capture to make people say "yes" to installation ... some criminals are unfortunately very clever. - Darkhacker, on 10/12/2007, -1/+4Flash and Javascript might be used and ask you to double click for a paticular reason. I can't think of any reasons off the top of my head, but I am sure there are situations when someone might want to do that on a page.
- superwick, on 10/12/2007, -3/+6description says it all.
- jerbaker, on 10/12/2007, -1/+3> it prevents malicious software from automatically installing on your system.
Come on now, let's not mislead ourselves. It doesn't prevent malicious software from automatically installing (unless there's some secret scanner that does its work during that five seconds). What it does is prevent malicious software from automatically installing without displaying a five second countdown. Nothing more, nothing less. - inactive, on 10/12/2007, -0/+2malicious programs doesnt have patience.
- fyre2012, on 10/12/2007, -1/+2again, WHAT THE ***** IS GOING ON WITH DIGG's COMMENT SYSTEM!?!?
Am I the ONLY one who is seeing this bug?
It creeps up without warning, and for whatever reason all the comments are just flat (not nested). I'll refresh in a minute and everything will be back to normal.
Also, i was somehow logged off while in the middle of making a comment...
Hm... isn't there a bug tracker somewhere? - nzgizmoguy, on 10/12/2007, -0/+1Same thing happens with 1.5.0.6
- inactive, on 10/12/2007, -2/+3people like me tend to get sloppy after long hours at the computer. Yes, ive clicked popups by accident. Yes ive quickly hit ok instead of cancel. Ive done this quite a few times, and ive been using this internet everyday for 8 years :|
- mookieXL, on 10/12/2007, -0/+1Probably doesn't do anything when story's on front page. But enough lame reports should prevent it from getting there. But i'm not sure.
- Osjpr, on 10/12/2007, -1/+2People don't read the install box, they read the countdown number and spam-click their mous button when it gets to 1.
- Himself, on 10/12/2007, -0/+1this user "protection" feature can be disabled by changing one line of code in a JAR. See
http://ExtensionsMirror.nl
for instructions - dunstdunst, on 10/12/2007, -0/+1http://firefox2.us
- sigma419, on 10/12/2007, -9/+10Oh, yes. A message box counting down from three is EXACTLY the same as an operating system crash.
You Microsoft haters annoy me. Sure, I'm not in love with them either, but you don't need to jump on every chance you've got to bash on them. - titlesaysitall, on 10/12/2007, -2/+3I choose door #4
- LakeshoreBaby, on 10/10/2007, -0/+1Go to about:config
Change local_install.disableInstallDelay
to true - inactive, on 10/12/2007, -1/+1The difference is that it prevents even advanced users from falling victim to automatically installing code hidden to them. If it went without giving you the heads-up, it could be very bad for even the most advanced of users, who may have clicked the wrong thing on accident.
-
Show 51 - 100 of 105 discussions



What is Digg?
The Digg Toolbar for Firefox lets you Digg, submit content, and keep track of Digg even when you're not on the Digg site. Download the official