<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Hey David! Good to hear from you!</p>
<p>A quick intro for me, since this is my first time posting on this
list. I'm Kevin, a PhD student at NYU who is focusing on Tor in
general, and Tor Usability in specific.</p>
<p>I think this would be a super useful change. I'm a bit worried
about making the warning a bit more in-your-face due to the
potential pop-up fatigue, but I think that if it's designed well
(only asked once per browsing session, etc.) it would certainly
attract more attention to the issue. <br>
</p>
<p>Thanks,</p>
<p>Kevin<br>
</p>
<div class="moz-cite-prefix">On 8/27/18 2:26 PM, David Huerta wrote:<br>
</div>
<blockquote type="cite"
cite="mid:06F1CA4C-D328-40C0-B1FD-12316DC9E2BF@nycresistor.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
Hey everyone,
<div class=""><br class="">
</div>
<div class="">A quick intro: I’m David, one of the digital
security trainers at Freedom of the Press Foundation.</div>
<div class=""><br class="">
</div>
<div class="">A recurring design issue I’ve encountered in
trainings around Tor Browser is accidental resizing of the Tor
Browser window. This is especially the case with Tails and other
distros using Gnome, which is set up to maximize any window
dragged far enough upward. In almost every case, no trainee
notices the warning about browser fingerprinting.</div>
<div class=""><br class="">
</div>
<div class="">I have some thoughts on how to address this that
I’ve added here: <a
href="https://trac.torproject.org/projects/tor/ticket/20260"
class="" moz-do-not-send="true">https://trac.torproject.org/projects/tor/ticket/20260</a> and
here: <a href="https://labs.riseup.net/code/issues/15766"
class="" moz-do-not-send="true">https://labs.riseup.net/code/issues/15766</a> but
curious to see if anyone else on the UX list has thought about
how to make warnings less ignored or preventing not-undoable
mistakes.</div>
<div class=""><br class="">
</div>
<div class="">Cheers,</div>
<div class=""><br class="">
</div>
<div class="">.dh</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
UX mailing list
<a class="moz-txt-link-abbreviated" href="mailto:UX@lists.torproject.org">UX@lists.torproject.org</a>
<a class="moz-txt-link-freetext" href="https://lists.torproject.org/cgi-bin/mailman/listinfo/ux">https://lists.torproject.org/cgi-bin/mailman/listinfo/ux</a>
</pre>
</blockquote>
<pre class="moz-signature" cols="72">--
Kevin Gallagher
Ph.D. Candidate
Center For Cybersecurity
NYU Tandon School of Engineering
Key Fingerprint: D02B 25CB 0F7D E276 06C3 BF08 53E4 C50F 8247 4861 </pre>
</body>
</html>