Activity
Trac:
Description: Right now click-to-play of videos is quite cumbersome and has poor usability. For example on youtube, this is what I observe on Medium Security.-
On first page load, no video or audio is visible -- the video box is gray. A "musical notes" icon appears in the middle of the video box, and an "orbiting dots" indicator seems to indicate some problem loading. After a few seconds the video box goes black and it says "an error occured." Then after another few seconds the "musical notes" icon reappears.
-
If I click on the "musical notes" icon, then a confirmation box appears, that says "Temporarily allow ... [URLs and codec gibberish]". If I click OK, then the whole page reloads. Again I get a gray video box with orbiting dots. This time there is a film canister icon in the middle of the dots.
-
If I click on the film canister it says, "Temporarily allow [URL and more codec gibberish]". again I click OK, the page reloads and the video finally plays.
So here, click-to-play required two clicks and two reloads (plus confirmation clicks). Ideally it should require only one reload. The option to click to play the video should be much more clear (it should probably have the text "Click to Play"). If there is a confirmation prompt, then it should clearly explain to that video/audio is about to be loaded, and what the security concerns are.
to
Right now click-to-play of videos is quite cumbersome and has poor usability. For example on youtube, this is what I observe on Medium Security.
-
On first page load, no video or audio is visible -- the video box is gray. A "musical notes" icon appears in the middle of the video box, and an "orbiting dots" indicator seems to indicate some problem loading. After a few seconds the video box goes black and it says "an error occured." Then after another few seconds the "musical notes" icon reappears.
-
If I click on the "musical notes" icon, then a confirmation box appears, that says "Temporarily allow ... [URLs and codec gibberish]". If I click OK, then the whole page reloads. Again I get a gray video box with orbiting dots. This time there is a film canister icon in the middle of the dots.
-
If I click on the film canister it says, "Temporarily allow [URL and more codec gibberish]". again I click OK, the page reloads and the video finally plays.
So here, click-to-play required two clicks and two reloads (plus confirmation clicks). Ideally it should require only one reload. The option to click to play the video should be much more clear (it should probably have the text "Click to Play"). The click-to-play button shouldn't disappear when the youtube page tries to re-load the video. If a confirmation prompt is to be shown, then it should clearly explain to the user that video/audio is about to be loaded, and what the security concerns are.
-
Thanks Arthur for bringing this important usability issue to note!
For me, I always use the NoScript icon >> "Blocked Objects" >> "Temporarily allow *@https://www.youtube.com". This requires only 1 click and enables both audio+video (whereas with click-to-play one has to individually allow video and audio).
However for non-technical persons this isn't obvious at first sight. Fixing this will involve having to change NoScript's UX so that a "Temporarily allow videos and audio from www.youtube.com" shows up that the user can easily understand and toggle to meet his needs.
Replying to cypherpunks:
Thanks Arthur for bringing this important usability issue to note!
Agreed! I think that we should definitely work on making this one intuitive click and one reload.
For me, I always use the NoScript icon >> "Blocked Objects" >> "Temporarily allow *@https://www.youtube.com". This requires only 1 click and enables both audio+video (whereas with click-to-play one has to individually allow video and audio).
I didn't know that video and audio had to be enabled separately. :(
However for non-technical persons this isn't obvious at first sight. Fixing this will involve having to change NoScript's UX so that a "Temporarily allow videos and audio from www.youtube.com" shows up that the user can easily understand and toggle to meet his needs.
This is a good idea. A "make things work for me" button on a page is what people want more than "only allow audio, only allow video." We (the tor browser team and the ux team) are thinking of better security toggles to give the user, and we'll definitely take this into consideration.
Trac:
Parent: N/A to #23150 (moved)FWIW this is the relevant noscript.net forum post: https://forums.informaction.com/viewtopic.php?f=10&t=23273
Trac:
Username: tokotoko
Cc: N/A to fdsfgs@krutt.org
Trac:
Cc: fdsfgs@krutt.org to fdsfgs@krutt.org, intrigeriTrac:
Cc: fdsfgs@krutt.org, intrigeri to fdsfgs@krutt.org, intrigeri, dmr