- From: Anssi Kostiainen via GitHub <sysbot+gh@w3.org>
- Date: Mon, 23 Oct 2023 12:33:09 +0000
- To: public-device-apis-log@w3.org
Thanks for the proposal. The WG has discussed this type of an attack and has decided that a spec-conformant implementation may [stop the sensor](https://www.w3.org/TR/generic-sensor/#stop-sensor) or [reduce accuracy](https://www.w3.org/TR/generic-sensor/#reduce-accuracy) when the device is vibrating. These two mitigations help address not just vibration-based fingerprinting but also e.g. password skimming attacks the WG has also investigated. While we're here, I'd like to share that this WG responsible for the Sensor APIs is chartered with a privacy focus and works with privacy researchers to analyze new attacks and specify mitigations to them. We also work with the general public and equally appreciate your contributions. Please let us know if this satisfies your requirements or whether you'd like to suggest normative changes or informative clarifications to the specification(s). Please note the [Accelerometer](https://www.w3.org/TR/accelerometer/) spec extends the [Generic Sensor API](https://www.w3.org/TR/generic-sensor/) spec, and it is the latter that defines the generic mitigations. Thank you. -- GitHub Notification of comment by anssiko Please view or discuss this issue at https://github.com/w3c/accelerometer/issues/69#issuecomment-1775092173 using your GitHub account -- Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Monday, 23 October 2023 12:33:11 UTC