[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #12684 [Torbutton]: Make "Not Now" the default button for TorBrowser's canvas permission dialogue

#12684: Make "Not Now" the default button for TorBrowser's canvas permission
dialogue
---------------------------+--------------------------------------------
     Reporter:  isis       |      Owner:
         Type:  defect     |     Status:  new
     Priority:  major      |  Milestone:
    Component:  Torbutton  |    Version:
   Resolution:             |   Keywords:  tbb-usability, tbb-linkability
Actual Points:             |  Parent ID:
       Points:             |
---------------------------+--------------------------------------------
Description changed by isis:

Old description:

> When TorBrowser's HTML5 canvas permission dialogue pops up from the URL
> bar,
>
> [[Image(https://i.imgur.com/ZGqzK4Z.png)]]
>
> I suspect that users have ''no idea'' what any of that text means, and so
> they click the largest, most-visible button available on the dialogue
> box. Right now, that's the "Allow in the Future" button, which allows the
> site to access HTML5 canvases forever (and until #12682 and/or #12683 are
> fixed, there isn't a way to revoke that permission).
>
> I suggest that we make the largest, most-visible button on this dialogue
> be the one which doesn't allow the site permission to access HTML5
> canvases, i.e. the "Not Now" button, since a site which is trying to do
> this is overwhelmingly likely to be sourcing some evil ad company's
> scripts which try to track users. It's not fair to make normal users
> understand how this works, so let's use people's desires to make popups
> go away ASAP to their own advantage for their privacy, without making
> them think too hard about it.
>
> For background info, see [https://lists.torproject.org/pipermail/tor-
> talk/2014-July/033969.html this thread on the tor-talk mailing list].

New description:

 When TorBrowser's HTML5 canvas permission dialogue pops up from the URL
 bar,

 [[Image(https://trac.torproject.org/projects/tor/raw-
 attachment/ticket/12684/tlk.io-canvas-access.png)]]

 I suspect that users have ''no idea'' what any of that text means, and so
 they click the largest, most-visible button available on the dialogue box.
 Right now, that's the "Allow in the Future" button, which allows the site
 to access HTML5 canvases forever (and until #12682 and/or #12683 are
 fixed, there isn't a way to revoke that permission).

 I suggest that we make the largest, most-visible button on this dialogue
 be the one which doesn't allow the site permission to access HTML5
 canvases, i.e. the "Not Now" button, since a site which is trying to do
 this is overwhelmingly likely to be sourcing some evil ad company's
 scripts which try to track users. It's not fair to make normal users
 understand how this works, so let's use people's desires to make popups go
 away ASAP to their own advantage for their privacy, without making them
 think too hard about it.

 For background info, see [https://lists.torproject.org/pipermail/tor-
 talk/2014-July/033969.html this thread on the tor-talk mailing list].

--

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12684#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs