Skip to main content

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

Required fields*

5
  • 10
    "Microsoft could've done this with UAC ... and having gigantic type that says Hey, so you know, you're getting a virus." This is a horrible example. If they were able to tell it was a virus the response would be "We blocked a virus from installing". Beyond that the predecessor of warning fatigue, the Windows messagebox, used to have 8 different icons; it's since been condensed to 4 (one which is deprecated) because the icons only added to user fatigue/confusion. Commented Sep 5, 2013 at 18:49
  • I disagree, Dan. At the moment, UAC pulls it's warnings by identifying certain types of action taken on higher and lower system levels. By adding even a SINGLE layer of analysis before passing a "Are you sure?" prompt, it could further classify beyond those 4 messages. By categorizing via icon/color, but adding simple and easy-to-understand messages, they could save user fatigue. "Do you authorize blahblah.." no one will read. "A virus is trying to install" puts the subject up front. That's the key. Commented Sep 6, 2013 at 16:13
  • 7
    Detected virus would be blocked without asking. Problem is in deciding whatever something that want to be installed is a legitimate software or a malicious one. Commented Sep 6, 2013 at 17:53
  • Which suggests that the actual function of UAC was to deflect responsibility from the system (which was too stupid to determine the actual harm of the action) to the user who wasn't given enough information to determine the effect of the action. A corollary is that the UAC would be completely ineffective, which in fact it turned out to be. Commented Sep 7, 2013 at 2:09
  • 2
    It was supposed to cover situations where system is unable to discover that something is malicious action, but human is able to notice it - with the same data. Commented Sep 8, 2013 at 14:52