Comment 325 for bug 332945

MPT wrote:
Uwe Schilling: You basically restated my point -- assuming that people will see a window that looks like the updates window, and behaves like the updates window, but be able to tell that it's fake solely because it opened automatically. I think that's quite unrealistic, because it would require a much better memory for past actions than people usually have. For example, if you open Update Manager yourself but get a phone call and have to switch to another task in a hurry, and don't return to Update Manager until the next day, you may have no memory of opening it the previous day. (Expecting people to then close it and reopen it, *just in case* the already-open instance was a fake one, would be even less realistic.)

Ok, I finally understand the point you are making and I have to admit that the security thread I saw had always existed, at least in parts. However, I still think that the current behaviour of update manager might enhance the possibility of a successful attack.

Nevertheless, the other issues brought up here remain valid and I support a different solution than the current one. My two cents: why not use the title bar of each window for notifications. There, they could be a form of a permanent notification, you can have scrolling text to really let the user know what the notification is all about and it something is moving up there it will definitely be noticed. Furthermore, basically every application (except for full-screen applications, which one would not want to interrupt anyway) uses the titlebar, so it would always be visible, no matter, what the user is doing. Just an idea though...