X-Spam-Check-By: sourceware.org Date: Mon, 16 Jul 2007 14:52:38 -0400 (EDT) From: Igor Peshansky Reply-To: cygwin AT cygwin DOT com To: Brian Kelly cc: cygwin AT cygwin DOT com Subject: Re: hacked package on server In-Reply-To: <12471618.1184601552985.JavaMail.root@elwamui-lapwing.atl.sa.earthlink.net> Message-ID: References: <12471618 DOT 1184601552985 DOT JavaMail DOT root AT elwamui-lapwing DOT atl DOT sa DOT earthlink DOT net> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm Precedence: bulk List-Id: List-Unsubscribe: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Ugh, top-posting... Reformatted. On Mon, 16 Jul 2007, Brian Kelly wrote: > -----Original Message----- > >From: Christopher Faylor > >Sent: Jul 16, 2007 11:52 AM > >To: cygwin AT XXXXXX DOT XXX . Thanks. > >Subject: Re: hacked package on server > > > >On Mon, Jul 16, 2007 at 10:30:52AM -0500, Louis Kruger wrote: > >> I also have a complaint: the dialog that notifies the user of the > >> failed MD5 is not well designed. The dialog asks "Do you want to > >> skip the package?" and has a yes and no button. I read it quickly > >> and pressed no before thinking about it, the package went ahead and > >> tried to install. I think there should be a little more effort to > >> restrain the user from performing a dangerous action such as > >> installing a package with a wrong MD5. > > > >Good point. The message should probably be > > > >Do you want to not skip the package (No/Yes)? > > > >cgf > > This would be "more" helpful: > > Do you want to not skip the package (No/Yes/Maybe)? > > The "Maybe" can then consult a random number routine to decide whether > or not to do the operation. Jeez, guys. Haven't you learned ANYTHING in a UI design course? The main purpose of the UI is to give the user a warm fuzzy feeling and to overwhelm him with critical information to the point of being incapable of making rash decisions like this. Therefore, the message should read thus: Do you not want to not skip the abovementioned package? And the buttons should read "Yes", "No", and "I need more time to decide", the last one being in the middle and more prominent. It would also help to have a fake countdown running somewhere in the window, with large black digits. Guess which button the user will go for? Igor -- http://cs.nyu.edu/~pechtcha/ |\ _,,,---,,_ pechtcha AT cs DOT nyu DOT edu | igor AT watson DOT ibm DOT com ZZZzz /,`.-'`' -. ;-;;,_ Igor Peshansky, Ph.D. (name changed!) |,4- ) )-,_. ,\ ( `'-' old name: Igor Pechtchanski '---''(_/--' `-'\_) fL a.k.a JaguaR-R-R-r-r-r-.-.-. Meow! Belief can be manipulated. Only knowledge is dangerous. -- Frank Herbert -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/