Re: [w3ctag/spec-reviews] Ambient Light Sensor API (#115)

Hi @tobie and @anssiko — we're just catching up on this in our F2F.  It looks like the privacy work continues here, which is great. Given that one of the attacks we've discussed is the information an attacker can get about the user's environment (gather enough data to work out what movie the user is watching, or what the layout is of the building they're in) — it would be useful to expand on this possibility in the Security and Privacy Concerns in the Ambient Light spec.  

(Right now, it just says that there are no specific security and privacy considerations beyond those described in the Generic Sensor API.  The Generic Sensor API says that each sensor type should be assessed individually.  So it feels a bit like these considerations aren't getting a mention in either doc just yet.)

If you're set with that, let us know and we'll close this issue. 

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3ctag/spec-reviews/issues/115#issuecomment-278476796