Hacker News new | ask | show | jobs
by CuriousCosmic 1301 days ago
I don't think it's that unusual.

> Ahh yes, finally, government-enforced password policies. They have lost their mind.

Sure arguing over the password policy itself is somewhat silly however those shorter/lower complexity passwords are trivial to crack in the event of a data leak even when properly salted and hashed.

> And they have thoughts on UI design too!

This one makes perfect sense. The complaint is that you can close the window while in a call without any prompts. It's not that the UX is bad (IMHO it's very useful) but that it can lead to accidental leaks of information that could be trivially avoided with minor changes.

The solution to this is trivial. Prompt on close (but not minimise) when in a call to warn the user and provide a setting to hide this prompt.
1 comments
YuPro 1301 days ago
Prompt on close is very bad solution in terms of UX. For example, I never click minimize in Discord because I hate non-tray apps if I need them in background. I dislike Obsidian for that because I can't even use RBTray without enabling native window frame which is worse than standard.

And because of habit to have minimize-to-tray on [x] I would also dislike moving that option to [_] and reserve [x] to exit. I know I will just press it because of habit and close my active chat with app. And discord is not fast app to load on my PC.

But technically it will be best solution if they want to comply with the requirements of officials. Or maybe already implemented one-time prompt is enough for them.

link
CuriousCosmic 1301 days ago
It's only a bad solution if it's not disable-able and it happens in all cases (rather than only when the user is still in a call).

Ideally it's a warning that you can disable. With safety/privacy it's generally preferable to have warnings as the default and allow users to take the trainer wheels off rather than risk a new user exposing themself accidentally.

link
YuPro 1301 days ago
Yes, that would work too and quite good practice. But not sure if I like that it's push from officials anyway, especially when I see that's adjacent to other "breaches" in that document.
link