[cap-talk] Reinterpreting POLA - "Authority Must Not Exceed Trust"

[ihab.awad at gmail.com]

On 9/17/07, Ka-Ping Yee <cap-talk at zesty.ca> wrote:
> ... Users do not always predict the consequences of their
> actions correctly; there are two ways we can address this:
>     1. Change the system model to fit the mental model.
>     2. Change the mental model (i.e. educate users) to fit the system.

Given that, does #1, in your view, include adding extra information to
the system (perhaps contributed by other users)? This would be the
equivalent of Granma having her 13-year-old grandson looking over her
shoulder, saying, "Yeah, that's fine!" or "No no no, don't let *that*
thing communicate with Evil.com!"

Also, does this information include annotating components that are
*likely* to take advantage of naive users by forming
hard-to-understand compositions of abilities, so that they are
blacklisted, or at least red-flagged?

Ihab

-- 
Ihab A.B. Awad, Palo Alto, CA