W3C home > Mailing lists > Public > public-webrtc-logs@w3.org > January 2019

[mediacapture-main] Spec does no handle fingerprinting related to exposing non default capture devices (#559)

From: youennf via GitHub <sysbot+gh@w3.org>
Date: Fri, 18 Jan 2019 22:38:42 +0000
To: public-webrtc-logs@w3.org
Message-ID: <issues.opened-400915884-1547851121-sysbot+gh@w3.org>
youennf has just created a new issue for https://github.com/w3c/mediacapture-main:

== Spec does no handle fingerprinting related to exposing non default capture devices ==
The spec calls out that the number of devices is a potential fingerprint.
Most devices have a standard number of cameras and microphones that web sites can infer from information like navigator.userAgent.
Devices with additional cameras/microphones (say USB webcams) can be fingerprinted if enumerateDevices is exposing these additional cameras/microphones.

I wonder whether this specific fingerprint should be called out in the specification.
Countermeasures should be implementable/could be proposed.
In particular, implementations should be allowed to remove any device deemed appropriate when copying resultList in filteredList (step 2.6.2 of enumerateDevices).

Please view or discuss this issue at https://github.com/w3c/mediacapture-main/issues/559 using your GitHub account
Received on Friday, 18 January 2019 22:38:43 UTC

This archive was generated by hypermail 2.3.1 : Tuesday, 4 June 2019 15:32:54 UTC