On 10/06/13 14:12, Simon McVittie wrote: > On 10/06/13 12:34, Daniel Pocock wrote: >> a) a web site displaying a "PolicyKit" popup that resembles the wording >> of the Debian popup > GNOME Shell does mitigate this by using a distinctive UI for > "system-modal dialogs", which makes use of the fact that the Shell is > the window compositor in order to dim the rest of the screen: > > <http://people.gnome.org/~halfline/power-off-dialog.png> > > That's the "power off" dialog, but PolicyKit prompts are similar. Notice > that everything outside the dialog is desaturated and darker than usual. > I would hope that web browsers don't have that level of control over the > system's appearance (going to full-screen is the closest they could get, > and they'd still have to reproduce a darkened form of the entire screen > contents somehow).
That screenshot appears to be Gnome 3. I log in with Gnome Classic so maybe I'm experiencing something different. The dialog I see does not have the appearance of the screenshot in that link - you can see a screenshot attached to the bug here: http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=25;filename=708548.png;att=1;bug=708548 and it is not modal either. Those may be other bugs in the way this works. I agree that having a modal dialog with a dimmed background would help, maybe this is meant to happen but the code is not working correctly in Gnome classic mode? It was also demonstrated with Windows 7 that users could be tricked by web sites that simply dimmed the background of the browser window - so it is not a perfect solution and I would personally prefer to see users referred to initiate "su" or "sudo" on their own. Another way to do this might be telling them about updates at login time or when the screen is locked. Those are places where the user normally enters a password anyway. Immediately after they enter the password, the user could be informed about pending updates, within the same login UI, rather than having popups appearing out of nowhere. -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/51b5cc89.3060...@pocock.com.au
