[LINK] Study shows pop-up warnings are ineffective

[Stilgherrian]

On 30/09/2008, at 10:54 AM, Karl Auer wrote:
> On Tue, 2008-09-30 at 10:14 +1000, Stilgherrian wrote:
>> Every single trust mechanism we try to build must sit on top of some
>> trusted layer below
>
> There's a difference between trusting the layer and trusting some  
> series
> of executable statements arriving into that layer. Deciding whether  
> some
> arbitrary chunk of code is OK to execute is a world more complex that
> just deciding what to do with an image or some text.

No, you're just moving your trust to the next layer down.

Stil