News for hackers. Stuff that matters.
Re:W3.org Cert Expired by Wowfunhappy on Tuesday June 01, 2021 @11:10PM (#27364367)
"Neat" is one word for it, sure.

It's nothing wrong with a user deciding "I realize something is wrong, and I shouldn't trust that anything on this website is legitimate, and I shouldn't give it any information, but I'd still like to read the story/article/blog."

There should be a low-opacity button inside the "Advanced" menu.

Re:W3.org Cert Expired by judge2020 on Tuesday June 01, 2021 @11:16PM (#27364410)
I have a button there: https://i.judge.sh/each/Star/chrome_qziy165xYV.png

But if the button isn't there, that's probably because w3 has HSTS enabled (for past visitors), which tells the browser to never load unencrypted. The `thisisunsafe` workaround is there to be a middle ground between actually making it impossible to load and preventing users loading an unsecure page when they shouldn't.

Re:W3.org Cert Expired by wearywanderer on Tuesday June 01, 2021 @11:17PM (#27364424)
People don't read buttons. However, I share your disdain for Chrome's chosen method; it's very gate-keepery. It requires you to be "in the know"; those who understand the danger but haven't heard of the trick are deliberately left out.

I think a reasonable compromise would be a button that pulls up a dialog prompting you to type out a consent message. The dialog tells you what to write instead of keeping this as esoteric knowledge, but the user is still compelled to at least read the warning instead of blindly pressing buttons.

Re:W3.org Cert Expired by bawolff on Tuesday June 01, 2021 @11:27PM (#27364493)
Compare to firefox which has no bypass.

This is the sort of thing, if you're not in the know than you probably dont understand the consequences.

Re:W3.org Cert Expired by wearywanderer on Tuesday June 01, 2021 @11:54PM (#27364650)
> This is the sort of thing, if you're not in the know than you probably dont understand the consequences.

Understanding the premise and importance of HTTPS and knowing about some esoteric hidden UX of some Google software are not at all the same thing.

Re:W3.org Cert Expired by bigyikes on Tuesday June 01, 2021 @11:18PM (#27364426)
Kinda agree, but they don't have a button probably to prevent people from habitually pressing the button to continue. Training your users to bypass security measures is not good security.
Re:W3.org Cert Expired by eru on Tuesday June 01, 2021 @11:25PM (#27364477)
For the same UI related reasons that makes confirmation dialogs useless.

(For them, undo is a much better replacement. Even gmail's 'fake' undo for unsending email.)

Re:W3.org Cert Expired by Waterluvian on Tuesday June 01, 2021 @11:15PM (#27364405)
They added a button in the form of a hackers only keyboard command.

Engineers can be so out of touch sometimes.