[tor-bugs] #8312 [Firefox Patch Issues]: Remove "This Plugin is Disabled" click-through

[Tor Bug Tracker & Wiki]

#8312: Remove "This Plugin is Disabled" click-through
--------------------------------------------------+-------------------------
 Reporter:  proper                                |          Owner:  mikeperry   
     Type:  defect                                |         Status:  needs_review
 Priority:  critical                              |      Milestone:              
Component:  Firefox Patch Issues                  |        Version:              
 Keywords:  tbb-usability, tbb-rebase-regression  |         Parent:              
   Points:                                        |   Actualpoints:              
--------------------------------------------------+-------------------------

Comment(by proper):

 Replying to [comment:10 mikeperry]:
 > Replying to [comment:9 proper]:
 > > Replying to [comment:8 mikeperry]:
 > > > Our choices here are "Remove the 'Click to manage plugins' link", or
 "Remove the barrier entirely".
 > >
 > > What are the privacy/security/usability consequences of "Remove the
 barrier entirely"?
 > >
 > > Let's suppose the user got on youtube.com and flash is still disabled
 by Tor Button (by default). What would happen once the user clicks on the
 first video?
 >
 > I just tested this as a Firefox patch.
 >
 > >  * case a: html5 / flash video
 >
 > The video displays as a black box while the youtube JS loads, probes for
 flash, detects it's missing, and then loads the HTML5 player, which
 NoScript then blocks. This can take several seconds.

 Sounds to be if and when #8386 gets implemented, the user experience will
 be equally good as with Mozilla Firefox? (Just that Tor is slow.) - If so,
 sounds good.

 > >  * case b: flash-only video
 >
 > Youtube tells you that the video requires Adobe flash, and gives you a
 download link.

 Ok, better. The same happens with Firefox, if Flash is not installed.

 Instead of the Flash download link, could you also make some more meaning
 full message? Such as...

 "Adobe Flash content has been blocked, because Flash can harm your privacy
 and anonymity.

 You could still enable it (Tools -> Add Ons -> Plugins -> Flash ->
 Enable.), which is recommend against.

 [https://trac.torproject.org/projects/tor/ticket/7680 The Tor Project is
 working on improving this.]

 In meanwhile you can try [http://? Flash alternatives] to watch this
 video."

 (The "Flash alternatives page" goes into various free flash download
 websites, flash video download helper and such things.)

 Before they enable it, they again get to see a warning, which is good.
 (#8313)

 > It's my opinion that this behavior is better overall. I also created
 #8386 to remove the NoScript HTML5 video barrier. I tested disabling the
 NoScript barrier, and I think it's a substantial enough improvement that
 we should just go ahead and remove it by default.

 Yes.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8312#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online