Internet: Is There A Problem Here?: Internet

Showing posts with label Internet. Show all posts

20120705

Problem ID: 6870706110103383280
Entered by: Ben Simo

Most frightening error message

tweets:

This. Most frightening error message ever.

Edit

20110916

Problem ID: 383240768854247406
Entered by: Ben Simo

Welcome, please choose your access...

Hotel Internet, oh how I love thee. Let me count the ways.

1) I love that you give me the option to choose between standard access and ... well nothing.

2) I love that you require I get an access code from the front desk. I wanted to talk to the desk clerk again. Now, what was my room number?

3) I love that you give me the option to upgrade to faster standard access... for an undisclosed additional fee.

4) I love that you require I read a long legal document through a tiny window, 3.9 lines at a time.

5) I love that using free Internet requires I make a $0 purchase via PayPal.

6) I love that once I purchase my free Internet, you give me another opportunity to enter the access code and room number... Plus, I jump at another opportunity to read the terms of service through a tiny window pane.

7) I love your helpful error messages and the lack of Internet access after I've performed so many tricks for you.

8) And most of all, I love that I have to call your wonderful technical support people and explain all that I've already done for you... and then do it again while they listen to me gripe about it on the phone.

Now, I just wish I could remember what it was I wanted to do on the Internet.

Edit

20100307

Problem ID: 4264672145216434136
Entered by: Anonymous

We had a little hiccup

"Especially the third point is a good one" - Bert

Edit

20100203

Problem ID: 2694447672622909085
Entered by: Ben Simo

Internet Connection Required

The first time, for each visit, I select to record an On Demand program on the DirecTV website, I am shown the following page telling me that an Internet connection is required.

It is true that a DVR must be connected to the Internet to record an On Demand movie. It may even be nice that DirecTV gives customers an option to order hardware that may help them make that connection happen. So what's the problem here?

To get to the point that the web page above is displayed, I had to select which DVR (even though I only have one) to which the instructions to record a movie should be sent. In order to get the DVR to show up in the list, I have to link the DVR to my website account. In order to do that, I had to connect my DVR to the Internet.

So unless the process is now different, or there are other options that the procedures I followed to be able to remotely program my DVR, any user that gets to this page already has their DVR connected to the Internet.

Edit

20100101

Problem ID: 6516275114146104773
Entered by: Ben Simo

It may be possible to correct the problem

cjwl: The Xfce people need a lesson in graceful error recovery, this is at startup. seriously bad UX

Edit

20090407

Problem ID: 4436397726595176996
Entered by: Zachary Fisher

Pandora's Box needs to be closed; Please re-open

Listening to tunes on Pandora while posting a blog. Hey! That song is nice! I want more like that! Let me measure my acceptance by clicking on the thumbs-up icon I've used every other time. And the song's still playing...perfect. I have time to vote on it while it is active. Here we go...um...wait. What's this:

Okay. So did my vote count? Did you get it, Pandora? Am I going to suffer the aural-warblings of some emo kids before I get to the songs that I like? And why is my copy out of date? I didn't do anything except let it play it the background. And on top of it, I recall hearing some songs I really liked 3 songs back. Will I be able to the see my play history after I take your prescribed advice to reload?

Nope. Great. Now that indie-artist, the one who REALLY needs the money in this economy, has just lost a potential sale. But at least MY Pandora is up to date. I'll take respite in Allison Krauss and Union Station ( whose music I really do like ).

Edit

20090311

Problem ID: 2285206137094479470
Entered by: Ben Simo

WARNING: Others might see what you publish on the Internet

I just clicked the PUBLISH POST button. I expect others to be able to see the information.

Edit

20090223

Problem ID: 8291570988820031383
Entered by: Ben Simo

To block or to reset? What is the question?

I click the Block button in response to a Windows AntiSpyware Notice. I then get a dialog that I assume is intended to confirm my selection.

Two questions in a single dialog? Which question am I being asked to answer? Do I answer the question asking if I want to block a change or do I answer the question asking if I want to reset back to an unknown (to me) original?

Edit

Usability Heuristics

• Visibility of system status Visibility of system status: The system should always keep users informed about what is going on, through appropriate feedback within reasonable time.

• Match between system and the real world Match between system and the real world: The system should speak the users' language, with words, phrases and concepts familiar to the user, rather than system-oriented terms. Follow real-world conventions, making information appear in a natural and logical order.

• User control and freedom User control and freedom: Users often choose system functions by mistake and will need a clearly marked "emergency exit" to leave the unwanted state without having to go through an extended dialogue. Support undo and redo.

• Consistency and standards Consistency and standards: Users should not have to wonder whether different words, situations, or actions mean the same thing. Follow platform conventions.

• Error prevention Error prevention: Even better than good error messages is a careful design which prevents a problem from occurring in the first place. Either eliminate error-prone conditions or check for them and present users with a confirmation option before they commit to the action.

• Recognition rather than recall Recognition rather than recall: Minimize the user's memory load by making objects, actions, and options visible. The user should not have to remember information from one part of the dialogue to another. Instructions for use of the system should be visible or easily retrievable whenever appropriate.

• Flexibility and efficiency of use Flexibility and efficiency of use: Accelerators -- unseen by the novice user -- may often speed up the interaction for the expert user such that the system can cater to both inexperienced and experienced users. Allow users to tailor frequent actions.

• Aesthetic and minimalist design Aesthetic and minimalist design: Dialogues should not contain information which is irrelevant or rarely needed. Every extra unit of information in a dialogue competes with the relevant units of information and diminishes their relative visibility.

• Help users recognize, diagnose, and recover from errors Help users recognize, diagnose, and recover from errors: Error messages should be expressed in plain language (no codes), precisely indicate the problem, and constructively suggest a solution.

• Help and documentation Help and documentation: Even though it is better if the system can be used without documentation, it may be necessary to provide help and documentation. Any such information should be easy to search, focused on the user's task, list concrete steps to be carried out, and not be too large.

Consistency Heuristics

-F amiliar Familiar: The product is not consistent with the pattern of any familiar problem.

E xplainable Explainable: The product is explainable.

W orld World: The product is consistent with the real world.

H istory History: The present version of the product is consistent with past versions of it.

I mage Image: The product is consistent with an image that the organization wants to project.

C omparable Products Comparable Products: The product is consistent with comparable systems.

C laims Claims: The product is consistent with what important people say it’s supposed to be.

U ser Expectations User Expectations: The product is consistent with what users want.

P roduct Product: Each element of the product is consistent with comparable elements in the same system.

P urpose Purpose: The product is consistent with its purposes, both explicit and implicit.

S tatutes Statutes: The product is consistent with applicable laws.

FAILURE Heuristics

F unctional Functional: The error detecting, reporting, and handling functions properly.

A ppropriate Appropriate: Errors are reported at the appropriate time in an appropriate manner.

I mpact Impact: The impact of the failure is communicated to those impacted.

L og Log: The error is appropriately logged; or not logged.

U ser Interface User Interface: The error is reported in the user interface in terms that the user understands.

R ecovery Recovery: The user is informed of what they need to do to recover from the error.

E motions Emotions: The error handling and reporting has a positive influence on user emotions.

Security Vulnerabilities

1. Injection Injection: Injection flaws occur when untrusted data is sent to an interpreter as part of a command. The attacker’s hostile data can trick the interpreter into executing unintended commands or accessing data without authorization.

2. Broken authentication and session management Broken authentication and session management: Application functions related to authentication and session management are often not implemented correctly, allowing attackers to compromise passwords, keys, or session tokens, or to exploit other implementation flaws to assume other users’ identities.

3. Cross-Site Scripting Cross-Site Scripting (XSS): XSS flaws occur whenever an application takes untrusted data and sends it to a web browser without proper validation or escaping. XSS allows attackers to execute scripts in the victim’s browser which can hijack user sessions, deface web sites, or redirect the user to malicious sites.

4. Insecure Direct Object References Insecure Direct Object References: A direct object reference occurs when a developer exposes a reference to an internal implementation object, such as a file, directory, or database key. Without an access control check or other protection, attackers can manipulate these references to gain unauthorized access to data.

5. Security Misconfiguration Security Misconfiguration: Good security requires having a secure configuration defined and deployed for the application, frameworks, application server, web server, database server, and platform. Secure settings should be defined, implemented, and maintained, as defaults are often insecure. Additionally, software should be kept up to date.

6. Sensitive Data Exposure Sensitive Data Exposure: Many web applications do not properly protect sensitive data, such as credit cards, tax IDs, and authentication credentials. Attackers may steal or modify such weakly protected data to conduct credit card fraud, identity theft, or other crimes. Sensitive data deserves extra protection such as encryption at rest or in transit, as well as special precautions when exchanged with the browser.

7. Missing Function Level Access Control Missing Function Level Access Control: Most web applications verify function level access rights before making that functionality visible in the UI. However, applications need to perform the same access control checks on the server when each function is accessed. If requests are not verified, attackers will be able to forge requests in order to access functionality without proper authorization.

8. Cross-Site Request Forgery Cross-Site Request Forgery (CSRF): A CSRF attack forces a logged-on victim’s browser to send a forged HTTP request, including the victim’s session cookie and any other automatically included authentication information, to a vulnerable web application. This allows the attacker to force the victim’s browser to generate requests the vulnerable application thinks are legitimate requests from the victim.

9. Using Components with Known Vulnerabilities Using Components with Known Vulnerabilities: Running software components with known vulnerabilities can compromise the vulnerable components and anything those components can access -- undermining defenses.

10. Unvalidated Redirects and Forwards Unvalidated Redirects and Forwards: Using untrusted data, without validation, to determine the destination of redirects and forwards can enable attackers to redirect victims to phisihing or malware sites.

Is There A Problem Here?

20120705

Most frightening error message

20110916

Welcome, please choose your access...

20100307

We had a little hiccup

20100203

Internet Connection Required

20100101

It may be possible to correct the problem

20090407

Pandora's Box needs to be closed; Please re-open

20090311

WARNING: Others might see what you publish on the Internet

20090223

To block or to reset? What is the question?

Problem or no problem?

Usability Heuristics

Consistency Heuristics

FAILURE Heuristics

Security Vulnerabilities

Popular

Recent Problems

Recent Comments