search

w3c / sensors

Generic Sensor API
https://www.w3.org/TR/generic-sensor/
Other
127 stars 59 forks source link

Move fingerprintable APIs behind permissions #398

Closed pes10k closed 4 years ago

pes10k commented 4 years ago

According to the authors of this paper, the standard includes functionality that allows users to be fingerprinted with high fidelity. (quote: “the DeviceMotionEvent APIs, particularly DeviceMotionEvent.acceleration and DeviceMotionEvent.rotationRate”) don’t require permissions to access. The standard needs to be updated so that users cannot be passively fingerpritined.

anssiko commented 4 years ago

The right repo for DeviceMotionEvent issues is https://github.com/w3c/deviceorientation/issues

Could you please migrate the issue and close this when done so that also your tracker stays in sync.

pes10k commented 4 years ago

Done and done, apologies for the error