hacked package on server

Igor Peshansky pechtcha@cs.nyu.edu
Mon Jul 16 18:52:00 GMT 2007

Ugh, top-posting...  Reformatted.

On Mon, 16 Jul 2007, Brian Kelly wrote:

> -----Original Message-----
> >From: Christopher Faylor <cgf-use-the-mailinglist-please@XXXXXX.XXX>
> >Sent: Jul 16, 2007 11:52 AM
> >To: cygwin@XXXXXX.XXX

<http://cygwin.com/acronyms/#PCYMTNQREAIYR>.  Thanks.

> >Subject: Re: hacked package on server
> >
> >On Mon, Jul 16, 2007 at 10:30:52AM -0500, Louis Kruger wrote:
> >> I also have a complaint:  the dialog that notifies the user of the
> >> failed MD5 is not well designed.  The dialog asks "Do you want to
> >> skip the package?" and has a yes and no button.  I read it quickly
> >> and pressed no before thinking about it, the package went ahead and
> >> tried to install.  I think there should be a little more effort to
> >> restrain the user from performing a dangerous action such as
> >> installing a package with a wrong MD5.
> >
> >Good point.  The message should probably be
> >
> >Do you want to not skip the package (No/Yes)?
> >
> >cgf
> This would be "more" helpful:
> Do you want to not skip the package (No/Yes/Maybe)?
> The "Maybe" can then consult a random number routine to decide whether
> or not to do the operation.

Jeez, guys.  Haven't you learned ANYTHING in a UI design course?
The main purpose of the UI is to give the user a warm fuzzy feeling and to
overwhelm him with critical information to the point of being incapable of
making rash decisions like this.

Therefore, the message should read thus:

Do you not want to not skip the abovementioned package?

And the buttons should read "Yes", "No", and "I need more time to decide",
the last one being in the middle and more prominent.  It would also help
to have a fake countdown running somewhere in the window, with large black
digits.  Guess which button the user will go for?
      |\      _,,,---,,_	    pechtcha@cs.nyu.edu | igor@watson.ibm.com
ZZZzz /,`.-'`'    -.  ;-;;,_		Igor Peshansky, Ph.D. (name changed!)
     |,4-  ) )-,_. ,\ (  `'-'		old name: Igor Pechtchanski
    '---''(_/--'  `-'\_) fL	a.k.a JaguaR-R-R-r-r-r-.-.-.  Meow!

Belief can be manipulated.  Only knowledge is dangerous.  -- Frank Herbert

Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

More information about the Cygwin mailing list