RFC: On-demand package installation API in kdelibs

Chani chanika at gmail.com
Wed Jul 28 20:00:01 BST 2010


On July 28, 2010 11:52:38 Sune Vuorela wrote:
> On 2010-07-28, Chani <chanika at gmail.com> wrote:
> > the way I read, it, lubos was suggesting something more like "if you want
> > to install support for $feature, click here" instead of "oh, you don't
> > have $feature, good luck finding and installing it on your own!"
> 
> And the 'click here' is exactly what I'm opposing to.
> 
> In a short while, evil websites will start do magic like
> 
> if(khtml or qtwebkit) {
>     do_popup_asking_for_login_credentials();
>     send_credentials_to_evil_owner();
> }
> 
> masking it as a 'to view this page properly, you need to install a
> additional plugin. please enter your root password to continue'.
> 
> And yes. Users is that stupid. We should not help the bad guys.
> 
> /Sune

if that's a problem, shouldn't we discontinue KWallet too? it has a popup 
asking for a password. and kdesu...





More information about the kde-core-devel mailing list