Re: [mediacapture-main] Devicechange event firing potentially being a fingerprint

Some thoughts on this:
* I don't think any other hardware-generated events (device 
orientation, battery come to mind) do this; this shouldn't prevent us 
from leading the way, but if we do, it would probably worth getting 
input from other groups, possibly asking the TAG

* if we were to do this, I can imagine several approaches:
 * only generate the event if the site has been granted access to one 
device; but this doesn't enable the use case where a Web app will 
start providing an AV feature upon the plugging of the first 
mic/camera
 * only generate the event if the page is "visible" (as per the [Page 
Visibility spec](https://www.w3.org/TR/page-visibility/))
 * or suggest UAs should fuzz the emission of the events (and their 
timestamps), possibly as an informative mitigation (in which case we 
should probably add a note on this in the privacy section as well)

-- 
GitHub Notification of comment by dontcallmedom
Please view or discuss this issue at 
https://github.com/w3c/mediacapture-main/issues/333#issuecomment-202756960
 using your GitHub account

Received on Tuesday, 29 March 2016 07:33:34 UTC