Security issue of orientation events. from Wojciech Masłowski on 2011-08-18 (public-geolocation@w3.org from August 2011)

From: Wojciech Masłowski <wmaslowski@opera.com>
Date: Thu, 18 Aug 2011 10:26:52 +0200
To: "public-geolocation@w3.org" <public-geolocation@w3.org>
Message-ID: <4E4CCCCC.9040303@opera.com>

http://www.newscientist.com/article/mg21128255.200-smartphone-jiggles-reveal-your-private-data.html

TLDR: It is possible to construct a keylogger using only accelerometer 
data. Maybe we should think about revising security policy for device 
orientation events and force UA to ask user if he wants to allow site to 
use orientation events.

-- 
Wojciech Masłowski
Engeneering CORE Wrocław
Opera Software ASA
http://www.opera.com

Received on Thursday, 18 August 2011 08:27:51 UTC