Hacker News Reader

Comment by lloeki | Hacker News Reader

> clicking each time

once, in the navbar, and whitelist the business-required site.

Well, but the recent fix to Java was to force the user to click through a prompt from the Java plugin itself; so once the user tells Firefox that yes, I want this dangerous content to run, they get another warning about dangerous content from Java.

If they manage to click through everything correctly and whitelist the site, they're good to go, but I suspect many of my users are going to get at least part of it wrong the first time through.

And of course, the noise about Java security is already breaking things -- for example, a few days ago I got an email from a teacher whose school paid me a $600 for a Java-applet based site subscription... at the same time as their IT department completely uninstalled Java from their school computers.

So now I either have to convince their IT department directly to re-install Java, or refund their money; whoops.

I don't think you should have to do neither convincing the IT department nor refunding them. One part of their organization chose to order the Java applet solution from you and another part of their organization chose to uninstall Java. The fact that they ordered a solution that they can't use isn't your fault. If they want you to use your time to work out a solution with the IT department how the applet can be used securely I think they need to pay you for that time (charge per hour for that, if the IT department is stubborn they have to pay more).

Reply on news.ycombinator.com