W3C home > Mailing lists > Public > public-webrtc-logs@w3.org > January 2019

Re: [mediacapture-main] enumerateDevices can be used to track user devices in background pages (#561)

From: Jan-Ivar Bruaroey via GitHub <sysbot+gh@w3.org>
Date: Fri, 25 Jan 2019 20:18:46 +0000
To: public-webrtc-logs@w3.org
Message-ID: <issue_comment.created-457713003-1548447525-sysbot+gh@w3.org>
> (has focus) ... 1000 frames ... Each frame can then be used to call enumerateDevices  at different times [long after it has lost focus]

Good one. The spec mitigation is flawed. [[storedDeviceList]] cannot live in the browsing context. Instead, it would have to be cached per origin probably.

> 5 seems simpler to spec, simpler to implement and web compatible. ... any downsides ... ?

It would solve all these issues, including the 1000 frames. It might also help reign in the rampant misuse, steering it toward its intended use-case.

The only downside I see would be if https://github.com/w3c/mediacapture-main/issues/560 isn't resolved favorably.

It would be weird if *enumerateDevices()* blocked in background tabs and *getUserMedia()* didn't.

-- 
GitHub Notification of comment by jan-ivar
Please view or discuss this issue at https://github.com/w3c/mediacapture-main/issues/561#issuecomment-457713003 using your GitHub account
Received on Friday, 25 January 2019 20:18:48 UTC

This archive was generated by hypermail 2.3.1 : Tuesday, 4 June 2019 15:32:54 UTC