RFC: On-demand package installation API in kdelibs

Sune Vuorela nospam at vuorela.dk
Wed Jul 28 19:52:38 BST 2010


On 2010-07-28, Chani <chanika at gmail.com> wrote:
> the way I read, it, lubos was suggesting something more like "if you want to 
> install support for $feature, click here" instead of "oh, you don't have 
> $feature, good luck finding and installing it on your own!"

And the 'click here' is exactly what I'm opposing to.

In a short while, evil websites will start do magic like

if(khtml or qtwebkit) {
    do_popup_asking_for_login_credentials();
    send_credentials_to_evil_owner();
}

masking it as a 'to view this page properly, you need to install a
additional plugin. please enter your root password to continue'.

And yes. Users is that stupid. We should not help the bad guys.

/Sune





More information about the kde-core-devel mailing list