W3C home > Mailing lists > Public > public-media-capture-logs@w3.org > March 2016

Re: [mediacapture-main] Devicechange event firing potentially being a fingerprint

From: Dominique Hazael-Massieux via GitHub <sysbot+gh@w3.org>
Date: Tue, 29 Mar 2016 07:33:31 +0000
To: public-media-capture-logs@w3.org
Message-ID: <issue_comment.created-202756960-1459236811-sysbot+gh@w3.org>
Some thoughts on this:
* I don't think any other hardware-generated events (device 
orientation, battery come to mind) do this; this shouldn't prevent us 
from leading the way, but if we do, it would probably worth getting 
input from other groups, possibly asking the TAG

* if we were to do this, I can imagine several approaches:
 * only generate the event if the site has been granted access to one 
device; but this doesn't enable the use case where a Web app will 
start providing an AV feature upon the plugging of the first 
mic/camera
 * only generate the event if the page is "visible" (as per the [Page 
Visibility spec](https://www.w3.org/TR/page-visibility/))
 * or suggest UAs should fuzz the emission of the events (and their 
timestamps), possibly as an informative mitigation (in which case we 
should probably add a note on this in the privacy section as well)

-- 
GitHub Notification of comment by dontcallmedom
Please view or discuss this issue at 
https://github.com/w3c/mediacapture-main/issues/333#issuecomment-202756960
 using your GitHub account
Received on Tuesday, 29 March 2016 07:33:34 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 16:27:29 UTC