On Thu, Apr 12, 2012 at 8:57 AM, Jason Miller <[email protected]> wrote: > > What would be wrong with using the same UI from Geolocation access for > something like camera access? An API method requests that the user grant > camera permissions, which shows them the appropriate dialog to confirm. > Events are fired to inform the requesting application whether it was > granted access or not. It could even differentiate between video > recordings and still picture taking, as long as there was a limited > "preview" API (perhaps a low-quality media stream). >
Standard runtime dialogs like that don't work well because of habituation. Over time, people become so conditioned to click "yes" that they will approve access under virtually any circumstance. Runtime dialogs can work if they are very *infrequent* because people don't see them enough to become conditioned to them. Once they start to be applied to multiple different types of (commonly-used) capabilities, they lose their effectiveness. _______________________________________________ dev-security mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security
