Jim Henderson wrote:
> In general, I think the idea of UAC as the "fix" is the problem.  

I dunno. From what I know of it, it seems like a reasonable fix. I see Mac 
fans saying they never have to type in their password, and Windows users 
saying they have to answer UAC prompts several dozen times a day, and I'm 
thinking "WTF?"  What in the world are Windows users doing that make them 
have to answer UAC prompts dozens of times a day, when I do it maybe once a 
week when making offsite backups?

> Granted, it's really a first attempt at fixing the problem, but still - 
> MS is supposed to be hiring some of the smartest people out there.  I 
> know some of them (not who work on the core OS, but on other parts of 
> their product offerings) certainly are.

Yeah.

Actually, I was thinking that UAC might not be quite enough. Now every 
program that needs to upgrade itself (like firefox, for example, or a virus 
scanner, or whatever) needs a privileged service running just so it can 
write over files without prompting for a password. I can't think how you'd 
fix that, except perhaps letting a program get overwritten by a new version 
that is signed by the same public key.

On the other hand, UNIX and OSX seem to get along OK without it. Linux needs 
the password to do updates, unless it's using a background process of 
course, so that's kind of the same except that almost all your updates come 
from the same place. I don't know what OSX does in this regard.

> We do have a habit of that, don't we? ;-)

Seems like it.  It seems I sometimes make comments that are only 
tangentially related to the stuff I'm quoting, which confuses people sometimes.

-- 
   Darren New, San Diego CA, USA (PST)
   My fortune cookie said, "You will soon be
   unable to read this, even at arm's length."

Post a reply to this message

On Sat, 07 Mar 2009 22:07:47 -0800, Darren New wrote:

> Jim Henderson wrote:
>> In general, I think the idea of UAC as the "fix" is the problem.
> 
> I dunno. From what I know of it, it seems like a reasonable fix. I see
> Mac fans saying they never have to type in their password, and Windows
> users saying they have to answer UAC prompts several dozen times a day,
> and I'm thinking "WTF?"  What in the world are Windows users doing that
> make them have to answer UAC prompts dozens of times a day, when I do it
> maybe once a week when making offsite backups?

Well, see, I never get them. ;-)  Come to think, I didn't get them while 
updating the Vista OS on this box, but that's because I turned them off.

> Actually, I was thinking that UAC might not be quite enough. Now every
> program that needs to upgrade itself (like firefox, for example, or a
> virus scanner, or whatever) needs a privileged service running just so
> it can write over files without prompting for a password. I can't think
> how you'd fix that, except perhaps letting a program get overwritten by
> a new version that is signed by the same public key.

That's kinda like the ActiveX control that gets installed in FF to allow 
software to be installed without the prompts.  Though it sounds like 
there's more to it than that.

> On the other hand, UNIX and OSX seem to get along OK without it. Linux
> needs the password to do updates, unless it's using a background process
> of course, so that's kind of the same except that almost all your
> updates come from the same place. I don't know what OSX does in this
> regard.

There's a reason I also don't do automatic updates on Linux as well.  I 
like to know what's being done to my system.

>> We do have a habit of that, don't we? ;-)
> 
> Seems like it.  It seems I sometimes make comments that are only
> tangentially related to the stuff I'm quoting, which confuses people
> sometimes.

I think we both do that, and that we both do it causes the confusion and 
violent agreements. ;-)

Jim

Post a reply to this message

Jim Henderson wrote:
> Well, see, I never get them. ;-)  Come to think, I didn't get them while 
> updating the Vista OS on this box, but that's because I turned them off.

I did too, while I was installing stuff. Then I turned it back on.

Come to think of it, I have to wonder how much of the griping about "too 
many UAC prompts" comes from vocal reporters whose job it is to do stuff 
like install and remove software and then write about it publicly.

The traditional "read email/surf web/write documents/balance checkbook" 
grandmothers that the Linux folks generally use as "typical home desktop 
user model" are unlikely to ever run across a UAC on Windows, except maybe 
during a software upgrade.

> That's kinda like the ActiveX control that gets installed in FF to allow 
> software to be installed without the prompts.  Though it sounds like 
> there's more to it than that.

I never heard of such an ActiveX, so I can't comment.

> There's a reason I also don't do automatic updates on Linux as well.  I 
> like to know what's being done to my system.

Me too. :-)  But you have to admit, there are groups of people who trust the 
Linux distributors (or Microsoft or Apple) more than they trust their own 
ability to make such decisions.

> I think we both do that, and that we both do it causes the confusion and 
> violent agreements. ;-)

Heh. I'll keep an eye out.

-- 
   Darren New, San Diego CA, USA (PST)
   My fortune cookie said, "You will soon be
   unable to read this, even at arm's length."

Post a reply to this message

On Sun, 08 Mar 2009 13:30:17 -0700, Darren New wrote:

> Jim Henderson wrote:
>> Well, see, I never get them. ;-)  Come to think, I didn't get them
>> while updating the Vista OS on this box, but that's because I turned
>> them off.
> 
> I did too, while I was installing stuff. Then I turned it back on.
> 
> Come to think of it, I have to wonder how much of the griping about "too
> many UAC prompts" comes from vocal reporters whose job it is to do stuff
> like install and remove software and then write about it publicly.

Maybe.  But they probably are supposed to install it like people who 
don't know computers use computers.

> The traditional "read email/surf web/write documents/balance checkbook"
> grandmothers that the Linux folks generally use as "typical home desktop
> user model" are unlikely to ever run across a UAC on Windows, except
> maybe during a software upgrade.

Possibly.

>> That's kinda like the ActiveX control that gets installed in FF to
>> allow software to be installed without the prompts.  Though it sounds
>> like there's more to it than that.
> 
> I never heard of such an ActiveX, so I can't comment.

I thought it was the one that started this thread (come to think, it was 
another) - a silently installed control in FF on Windows that comes with 
the .net framework update.

>> There's a reason I also don't do automatic updates on Linux as well.  I
>> like to know what's being done to my system.
> 
> Me too. :-)  But you have to admit, there are groups of people who trust
> the Linux distributors (or Microsoft or Apple) more than they trust
> their own ability to make such decisions.

Yes, but I think that comes down to poor education on computers in 
general. :-)

>> I think we both do that, and that we both do it causes the confusion
>> and violent agreements. ;-)
> 
> Heh. I'll keep an eye out.

Jim

Post a reply to this message

Jim Henderson wrote:
> Maybe.  But they probably are supposed to install it like people who 
> don't know computers use computers.

I think I did it again. :-) I'm not talking about first setting up the OS. 
I'm more talking about the people who complain they get dozens of UAC 
prompts a day.

>> I never heard of such an ActiveX, so I can't comment.
> 
> I thought it was the one that started this thread (come to think, it was 
> another) - a silently installed control in FF on Windows that comes with 
> the .net framework update.

Oh, I didn't realize that was ActiveX.  I wasn't aware you *could* "silently 
install" a plug-in in firefox. Every time I install one or it gets upgraded, 
Firefox is very in my face about it.

> Yes, but I think that comes down to poor education on computers in 
> general. :-)

Exactly. That's my point. If you're educated enough to know what you're 
doing, you're educated enough to adjust it to behave how you want it to.

-- 
   Darren New, San Diego CA, USA (PST)
   My fortune cookie said, "You will soon be
   unable to read this, even at arm's length."

Post a reply to this message

On Mon, 09 Mar 2009 10:14:49 -0700, Darren New wrote:

> Jim Henderson wrote:
>> Maybe.  But they probably are supposed to install it like people who
>> don't know computers use computers.
> 
> I think I did it again. :-) I'm not talking about first setting up the
> OS. I'm more talking about the people who complain they get dozens of
> UAC prompts a day.

We are talking about the same thing. :-)

>>> I never heard of such an ActiveX, so I can't comment.
>> 
>> I thought it was the one that started this thread (come to think, it
>> was another) - a silently installed control in FF on Windows that comes
>> with the .net framework update.
> 
> Oh, I didn't realize that was ActiveX.  I wasn't aware you *could*
> "silently install" a plug-in in firefox. Every time I install one or it
> gets upgraded, Firefox is very in my face about it.

My understanding from that thread was that it is ActiveX.  And I'm sure 
there's a way to install an extension for FF without invoking FF, that's 
probably what Microsoft has done.

>> Yes, but I think that comes down to poor education on computers in
>> general. :-)
> 
> Exactly. That's my point. If you're educated enough to know what you're
> doing, you're educated enough to adjust it to behave how you want it to.

Except that it should be designed properly to begin with. :-)

Jim

Post a reply to this message

Jim Henderson wrote:
> We are talking about the same thing. :-)

Could be.

> My understanding from that thread was that it is ActiveX.

I wouldn't be surprised. But being ActiveX doesn't preclude it being other 
things as well. Technically, Word is ActiveX as well. :-)

> And I'm sure 
> there's a way to install an extension for FF without invoking FF, that's 
> probably what Microsoft has done.

Yeah. And FF is designed to support that, so I'm at a loss why people thing 
something's done wrong. :-)

> Except that it should be designed properly to begin with. :-)

Hard to do, with conflicting requirements. Very difficult to design one car 
that supports both Indy racing and people who don't know how to drive.

-- 
   Darren New, San Diego CA, USA (PST)
   My fortune cookie said, "You will soon be
   unable to read this, even at arm's length."

Post a reply to this message

On Mon, 09 Mar 2009 11:32:14 -0700, Darren New wrote:

> Jim Henderson wrote:
>> We are talking about the same thing. :-)
> 
> Could be.
> 
>> My understanding from that thread was that it is ActiveX.
> 
> I wouldn't be surprised. But being ActiveX doesn't preclude it being
> other things as well. Technically, Word is ActiveX as well. :-)

True...

>> And I'm sure
>> there's a way to install an extension for FF without invoking FF,
>> that's probably what Microsoft has done.
> 
> Yeah. And FF is designed to support that, so I'm at a loss why people
> thing something's done wrong. :-)

Stealth installations are generally frowned upon.  But even in non-
stealth setups, I get sick of extra crap being included in downloads.  
Sun started including the "MSN Toolbar" in their JRE downloads.  Why on 
Earth would I want that crap on my system?  I always forget about it 
(remote installs for testing centers running Windows) and end up having 
to remove it once the installer is done.

I wanted the Sun JVM.  That's it.  If I wanted the stupid MSN Toolbar, 
I'd download that and install it separately.  I really wish companies 
would stop bundling crapware with their products.

>> Except that it should be designed properly to begin with. :-)
> 
> Hard to do, with conflicting requirements. Very difficult to design one
> car that supports both Indy racing and people who don't know how to
> drive.

People who don't know how to drive shouldn't be driving. :-)

Jim

Post a reply to this message

Jim Henderson wrote:
> I wanted the Sun JVM.  That's it.  If I wanted the stupid MSN Toolbar, 
> I'd download that and install it separately.  I really wish companies 
> would stop bundling crapware with their products.

The problem is that MSN (and Google and Yahoo and ...) pay about $5 to Sun 
if you install the toolbar. That's a powerful incentive. Primarily caused by 
people so oblivious to what's getting installed that they just click OK. :-)

Same reason Google is fighting Microsoft over default browsers.

-- 
   Darren New, San Diego CA, USA (PST)
   My fortune cookie said, "You will soon be
   unable to read this, even at arm's length."

Post a reply to this message

On Mon, 09 Mar 2009 13:35:32 -0700, Darren New wrote:

> Jim Henderson wrote:
>> I wanted the Sun JVM.  That's it.  If I wanted the stupid MSN Toolbar,
>> I'd download that and install it separately.  I really wish companies
>> would stop bundling crapware with their products.
> 
> The problem is that MSN (and Google and Yahoo and ...) pay about $5 to
> Sun if you install the toolbar. That's a powerful incentive. Primarily
> caused by people so oblivious to what's getting installed that they just
> click OK. :-)
> 
> Same reason Google is fighting Microsoft over default browsers.

Well yes, that is the problem - greed often is the problem. :-)

And yeah, it's not just MSN that's the problem.

Jim

Post a reply to this message