[LINK] Study shows pop-up warnings are ineffective

[Rick Welykochy]

Stilgherrian wrote:

> No, you're just moving your trust to the next layer down.

That's the crux of the trust stack.

If the next layer down is Mac OS X or Linux, I usually have a
high degree of trust in it. (I won't include that other OS
in the same breath!)

If the next layer down is the browser, the trust level is fairly
high.

But. If the next layer down is a JS interpreter or Flash plug-in,
my trust detector gets very twitchy indeed. It's similar to
downloading some C code, compiling and executing it on your machine.
Same level of risk.

There is a a big difference, as already pointed out, between downloading
executable code from extant sources and downloading plain old content
and rendering it. You must admit that there is a much higher risk
in the code case compared to plain old HTML.

cheers
rickw


-- 
________________________________________________________________
Rick Welykochy || Praxis Services || Internet Driving Instructor

No good deed goes unpunished.
      -- Clare Botthe Luce