W3C home > Mailing lists > Public > public-device-apis-log@w3.org > February 2019

Re: [deviceorientation] Add API for requesting permission to receive device motion / orientation events (#57)

From: Tim van Scherpenzeel via GitHub <sysbot+gh@w3.org>
Date: Fri, 01 Feb 2019 21:37:18 +0000
To: public-device-apis-log@w3.org
Message-ID: <issue_comment.created-459876205-1549057037-sysbot+gh@w3.org>
Thank you for your clear reply @othermaciej.

In that case I trust that you and the security experts are making the right choice in making this change. I don't have the experience in what it takes to make a browser safe nor do I have a clear view on exactly how malicious parties are exploiting the mentioned sensor API's. The [Gyrophone](https://www.usenix.org/system/files/conference/usenixsecurity14/sec14-paper-michalevsky.pdf) reference in the TAG Security and Privacy Questionnaire is really clever.

I hope we can find an elegant solution for how the requesting of permissions is done. To be completely honest, when I started looking into the API's myself about a year and a half ago I was very surprised users did not have to give explicit permission.

-- 
GitHub Notification of comment by TimvanScherpenzeel
Please view or discuss this issue at https://github.com/w3c/deviceorientation/issues/57#issuecomment-459876205 using your GitHub account
Received on Friday, 1 February 2019 21:37:20 UTC

This archive was generated by hypermail 2.3.1 : Friday, 1 February 2019 21:37:20 UTC