W3C home > Mailing lists > Public > public-media-capture-logs@w3.org > March 2016

Re: [mediacapture-main] Devicechange event firing potentially being a fingerprint

From: Dominique Hazael-Massieux via GitHub <sysbot+gh@w3.org>
Date: Tue, 29 Mar 2016 07:33:31 +0000
To: public-media-capture-logs@w3.org
Message-ID: <issue_comment.created-202756960-1459236811-sysbot+gh@w3.org>
Some thoughts on this:
* I don't think any other hardware-generated events (device 
orientation, battery come to mind) do this; this shouldn't prevent us 
from leading the way, but if we do, it would probably worth getting 
input from other groups, possibly asking the TAG

* if we were to do this, I can imagine several approaches:
 * only generate the event if the site has been granted access to one 
device; but this doesn't enable the use case where a Web app will 
start providing an AV feature upon the plugging of the first 
 * only generate the event if the page is "visible" (as per the [Page 
Visibility spec](https://www.w3.org/TR/page-visibility/))
 * or suggest UAs should fuzz the emission of the events (and their 
timestamps), possibly as an informative mitigation (in which case we 
should probably add a note on this in the privacy section as well)

GitHub Notification of comment by dontcallmedom
Please view or discuss this issue at 
 using your GitHub account
Received on Tuesday, 29 March 2016 07:33:34 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 16:27:29 UTC