On Thursday, January 7, 2016 at 3:23:39 PM UTC-7, Martin Thomson wrote: > Think of this not as "can I use your camera", but as "pick a camera > that I can use". When you pick a file for upload, you don't give the > site permission to the subsequently upload all the other files in that > directory. The "remember my choice" option is what is special here.
I do not accept this comparison. Allowing unfettered access to a file system is simply not equivalent to saying a site has access to all available cameras and microphones. The first is an obviously massive security breach, and nobody here is going to debate adding a setting to firefox that says "can I use your filesystem?" No reasonable person is going to agree that is secure/private. But the second is completely different. What's the security/privacy impact here? 1. For multiple microphones, we're talking about microphones that are in close proximity of one another, so it isn't like one microphone is going to pick up dramatically different information from another microphone. I do not understand the privacy concern; so long as access to one has been granted, might as well grant access to all of them. 2. For multiple cameras, most users don't even have this. If they do, it's unlikely they point at dramatically different things, except in the case of a cell phone, but that's more of a configuration issue than a privacy/security one. If a user does have a camera intentionally pointing at different things (which is definitely not typical), the user is probably aware of this and they'll take matters into their own hands. ...I think the way Chrome handles this is perfectly acceptable, and I do not understand why Firefox need to behave differently in this regard. Chrome is even MORE lax than what we're talking about; if you go to a page loaded vi HTTPS and allow camera/mic access, that is interpreted as a permanent "allow" to all cameras/microphones. What firefox is doing here is frankly overly restrictive, and for no good reason I can see. _______________________________________________ dev-media mailing list [email protected] https://lists.mozilla.org/listinfo/dev-media
