Secure Design

/secure-design51

Let's talk about making UX more secure.

2074
Dan Finlay 🦊
@danfinlay·
@depatchedmode what's that one secure UX flow chart you've shared where it is a spectrum of friction severity levels based on things like whether the action can be taken back easily?
/Secure Design
2600
depatchedmode
@depatchedmode·
Haven't organized a call recently due to personal obligations. Focusing on writing for the summer.

Excited to introduce Friction Observer as the vehicle for that writing! And happy to consider additional contributors:
https://friction.observer/points-of-friction

Will boot up again in the fall.
/Secure Design
2074
Dan Finlay 🦊
@danfinlay·
This is a particularly misguided addition of a security prompt by Apple. The user already explicitly indicated their intent to paste using the system-provided paste UI. If that’s part of client code, that’s a small mistake to fix: must be system level, then bake the auth into it.
/Secure Design
2600
depatchedmode
@depatchedmode·
This is a phenomenal breakdown of 3074, and what kind of support it needs from wallets.
/Secure Design
2600
depatchedmode
@depatchedmode·
Hosting some conversations on wallet UX tomorrow from 9:30am to noon at Denver central Market.

EOA -> Contract Account Migration UX
Account Recovery Specs/Standards

https://hackmd.io/x5nuU1x2QLCn1o2OVbiqQw
/Secure Design