News for hackers. Stuff that matters.
Re:Idiot Customers Will Accidentally Cancel Their Subscripti... by didntcheck on Monday July 10, 2023 @09:38AM (#36666248)
Dealing with users myself has had the somewhat uncomfortable effect of making me often give the benefit of the doubt to faceless corporations over users when there's a scandal of "$service did $thing without my permission!". Frankly the empirical evidence is that it is impossible to get users to acknowledge something, short of sending a messenger to their house in person. People will ignore any forced messages and click literally any button, and the blame will always land on you

It's also why I'm marginally less annoyed now when software prevents me from doing something "for my own good", even when I know what I'm doing. Or proactively prevents "off-label" use cases, because they know that a failure to block a use case will be taken as a commitment to support it

Re:Idiot Customers Will Accidentally Cancel Their Subscripti... by treeman79 on Monday July 10, 2023 @10:17AM (#36666814)
My person favorite is when something pops and immediately goes away because I was in the middle of typing, clicking, etc.

Umm okay well I just agreed or disagreed to something, and I have no idea what.

Also after watching my kids, there is nothing they wouldn’t agree to onscreen if gets them to next step in whatever they are doing. Would easily sell soul for a donut.

Re:Idiot Customers Will Accidentally Cancel Their Subscripti... by eddythompson80 on Monday July 10, 2023 @10:38AM (#36667116)
We have a resource management UI. You could delete resources by clicking ‘delete’ then clicking ‘yes’ on the delete confirmation box.

Users complained that that’s not sufficient, “We fat finger it all the time”. Ok, we added a text box to the delete dialogue where you have to type ‘confirm’. “Guess what, we still fat finger it”. Ok, instead of ‘confirm’ you have to type the resource name, id, or type. “Hey, we still fat finger it”. Fine, you can set a resource to un-deletable in its settings, then you have to go to its settings and uncheck that before you can delete it. We get complaints about both how convoluted our delete experience is and about how people still fat finger that.

It’s hard to make everything soft-delete with undo and needing to handle all integrity and correctness between deleted, restored and newly created resources etc. Not to mention regulatory things that require actual delete. But it’s becoming more and more expected or you’re “amateurish”.

Re:Idiot Customers Will Accidentally Cancel Their Subscripti... by Aloha on Monday July 10, 2023 @10:21AM (#36666871)
Most users care more about the service working well, than they do about their data being secure. Its why things like Mastodon (et al) will always have an uphill battle.
Re:Idiot Customers Will Accidentally Cancel Their Subscripti... by krisoft on Monday July 10, 2023 @10:23AM (#36666901)
> "$service did $thing without my permission!"

> Frankly the empirical evidence is that it is impossible to get users to acknowledge something

Interesting that you changed from “permission” to “acknowledge”. If the people are not “acknowledging” whatever then that sounds like you don’t have their permission.

What kind of forced message are we talking about here?

Re:Idiot Customers Will Accidentally Cancel Their Subscripti... by EatingWithForks on Monday July 10, 2023 @10:32AM (#36667028)
I'm pretty sure we've trained users to click "I accept" to basically any permissions popup or notification on any application.
Re:Idiot Customers Will Accidentally Cancel Their Subscripti... by mindslight on Monday July 10, 2023 @11:38AM (#36667990)
* * *
Re:Idiot Customers Will Accidentally Cancel Their Subscripti... by EatingWithForks on Monday July 10, 2023 @06:08PM (#36673676)
No I do really mean "we". Every website that asks for cookies. Every phone app that asks for permissions. Every interface with technology with an "I agree" to do anything. Microsoft isn't special, just an egregious example of it. But everyone does it.
Re:Idiot Customers Will Accidentally Cancel Their Subscripti... by mindslight on Monday July 10, 2023 @11:11PM (#36676000)
And I really intended to specifically condemn Microsoft for kicking it off. For one, pinning it on "we" is too widely scoped when it was only some developers/managers responsible for horrible UIs. For example the only people responsible for cookie spite-nags are the companies that decided malicious compliance was the way to go.

Phone apps were actually a decent way of asking for permissions - at the start when an app is first installed. That users couldn't say "no" was problematic, but the flow was correct. The newer style of interrupting a user to prompt on the first use is problematic. But the overall idea of setting permissions per app is sound - users needing to make these decisions is unavoidable, especially in the world of proprietary software where the interests of the developers strongly diverge from the interest of the users.

But in my condemnation I really do mean to call out Microsoft specifically. Sure a lot of things have routine dark patterns, but Windows is exceptional in terms of sheer volume and opaqueness. There's a massive difference between some javascript popup that can be ignored or Android asking one pertintent permissions question before accessing contacts/photos/etc, and Windows popping up multiple nondescript "OK" dialogs after a single user intent click.

Re:Idiot Customers Will Accidentally Cancel Their Subscripti... by didntcheck on Monday July 10, 2023 @11:00AM (#36667439)
Yeah I was really talking about two slightly different things

* Need to notify users about something (not something that requires new consent, just a service announcement like a breaking workflow change). Use emails, uncloseable banners for a month, forced modals, whatever. Users still claim they didn't see it despite proof that they had seen the modal and banner many times

* New feature exists. User explicitly enables it despite a very clear explanation of what it does and simple yes/no buttons. User clicks yes and then complains that it was enabled automatically without their permission. The stuff I work on doesn't deal much in personal data so this wasn't even legal consent, just power features that can cause harm if used flippantly

Not exclusive to development either. I hear the same stories from sysadmins on a weekly basis (of users ignoring any IT communication and clicking buttons randomly without reading, then blaming everyone but themselves). Probably similar stories from any non-tech service job too