[LINK] Study shows pop-up warnings are ineffective

[Kim Holburn]

On 2008/Sep/30, at 1:58 AM, Rick Welykochy wrote:

> Marghanita da Cruz wrote:
>> <http://www.computerworld.com/securitytopics/security/holes/story/0,10801,111091,00.html?source=x584 
>> >
>
> Will the ironies ever cease? The above page brings up a pop-up window.
> Here is the recommended workaround for the bug described:
>
>   "It can be circumvented by disabling Firefox's JavaScript handling  
> capability."
>
> Given the prevalence of "Web 2.0" sites, is it even practical these  
> days
> to disable JS? Web coders seem addicted to it, and use it often in  
> place
> of Good Ole HTML constructs.

I use noscript in firefox.  Sometimes, but not often I get to sites  
that I can't watch video on.  I wouldn't want to surf without noscript  
these days.

> Since I often have to hand-code web constructs, plain old HTML suits  
> me
> far better than complex JS-HTML interactions. I suppose the culprit is
> automated web coding software which produces heaps of bulky and  
> possibly
> useless extra cruft on web pages.

--
Kim Holburn
IT Network & Security Consultant
Ph: +39 06 855 4294  M: +39 3494957443
mailto:kim at holburn.net  aim://kimholburn
skype://kholburn - PGP Public Key on request