Fix #13: Expand Security and Privacy Considerations #33
Conversation
index.bs
Outdated
|
|
||
| To mitigate these Ambient Light Sensor specific threats, user agents should | ||
| use the following mitigation strategies: | ||
| - <a>limit maximum sampling frequency</a>, and |
There was a problem hiding this comment.
should it be "and or"? At the moment, it sounds that UA should use both simultaneously.
index.bs
Outdated
|
|
||
| - Information leaks about the user’s surrounding and work habits. | ||
| - Profiling. Readout from Ambient Light Sensor can potentially induce | ||
| information leaks about the user’s interests, web use and work |
There was a problem hiding this comment.
"web use" - Is there such term?
"work habits" - was in previous bullet.
"Information leaks about .... users’ surrounding" - was in previous bullet.
There was a problem hiding this comment.
I'll let @lknik comment on this text (a copy-paste from #13 (comment) with some very minor copyediting).
There was a problem hiding this comment.
Hello indeed those were too elaborate. Feel free to simplify, i.e.
"work habits" -> "use patterns"
Profiing - you are right, unnecessary repeat.
|
Included a new comment at #13 |
|
Updated the PR based on feedback, PTAL. |
There was a problem hiding this comment.
Basically fine, especially if we could include also (#13 (comment))
|
@lknik, I added cross-origin in the profiling risk. Now we should be covered, thanks! |
index.bs
Outdated
| @@ -78,8 +78,8 @@ Ambient Light Sensor provides information about lighting conditions near | |||
| the device environment. Potential privacy risks include: | |||
|
|
|||
| - Profiling. Ambient Light Sensor can leak information about user's use | |||
| patterns and surrounding. This information can be used to enhance user | |||
| profiling and behavioral analysis. | |||
| patterns and surrounding cross-origin. This information can be used to | |||
There was a problem hiding this comment.
Not sure about "surrounding cross-origin"? The surrounding in my mind here was the physical environment ;)
There was a problem hiding this comment.
I defer to a native speaker to give me a grammar lesson.
"Can leak information ... cross-origin."
Sounds good to me.
There was a problem hiding this comment.
It's not about the language ;) Cross-origin sounds like we're speaking about web/origins. I'm speaking about surrounding, like, even the physical environment.
There was a problem hiding this comment.
Please give us a concrete suggestion. A complete sentence.
There was a problem hiding this comment.
Yeah, revert. It ("merge") mangled a few things
PTAL @lknik @alexshalamov @pozdnyakov
Preview | Diff