[widgets] View modes security considerations

Hi there,

 

As promised and discussed this afternoon, some basic text for a Security
Considerations section in the widgets view modes spec:

 

 

"

Security Considerations

 

Implementers of this specification are asked to take into account and
design appropriate measures to deal with the following points for the
purpose of user security:

 

Widgets could be intentionally designed to visually dupe or confuse the
user for social engineering purposes. Some methods that could be used to
do this could be:

 

*         widgets that the user cannot see (full-screen invisible
widgets in front of other things on the screen, such as a PIN-code
entry)

*         widgets that have a size smaller than the user can reasonably
see (e.g. a 0.00001 x 0.00001 widget)

*         widgets that have no chrome that could masquerade as some
other existing object on the screen (for example a lock and key)

"

 

Thanks,

 

 

 

David.

 

 

David Rogers
OMTP Director of External Relations