Re: Fingerprinting of battery status?

2015-08-04 Thread Chris Hofmann
I've seen a lot of GPS related tracking apps that use a lot of power putting up warnings to users that it might be time to go to low power mode and shut down the GPS if you'll need it later for navigating a critical pathway later in your journey. -chofmann On Mon, Aug 3, 2015 at 7:49 PM, Katelyn

Re: Fingerprinting of battery status?

2015-08-04 Thread Ben Kelly
Can we just reduce the accuracy of the API? Only give battery level at certain broad breakpoints? On Tue, Aug 4, 2015 at 11:02 AM, Chris Hofmann chofm...@mozilla.com wrote: I've seen a lot of GPS related tracking apps that use a lot of power putting up warnings to users that it might be time

Re: Fingerprinting of battery status?

2015-08-04 Thread Tim Taubert
Ben Kelly wrote: Can we just reduce the accuracy of the API? Only give battery level at certain broad breakpoints? The authors of the cited paper [1] filed a bug report and we fixed that for 38 [2]. - Tim [1] http://eprint.iacr.org/2015/616.pdf [2]

Re: Fingerprinting of battery status?

2015-08-04 Thread Andrew McCreight
On Tue, Aug 4, 2015 at 9:33 AM, Jonas Sicking jo...@sicking.cc wrote: Fingerprinting doesn't seem useful if the fingerprint changes every few minutes as the battery level changes. I do agree that there are concerns that if the user has private-browsing pages and non-private-browsing pages

Re: Fingerprinting of battery status?

2015-08-04 Thread Martin Thomson
On Tue, Aug 4, 2015 at 9:33 AM, Jonas Sicking jo...@sicking.cc wrote: So disabling the API, or fudging its return values, in private browsing windows sounds like a good idea. The same applies to features like device orientation, proximity/light sensors, network information (wifi vs. mobile

Re: Fingerprinting of battery status?

2015-08-04 Thread Martin Thomson
On Tue, Aug 4, 2015 at 8:24 AM, Tim Taubert ttaub...@mozilla.com wrote: Can we just reduce the accuracy of the API? Only give battery level at certain broad breakpoints? The authors of the cited paper [1] filed a bug report and we fixed that for 38 [2]. I should think that more aggressive

Re: Fingerprinting of battery status?

2015-08-04 Thread Jonas Sicking
Fingerprinting doesn't seem useful if the fingerprint changes every few minutes as the battery level changes. I do agree that there are concerns that if the user has private-browsing pages and non-private-browsing pages open at the same time, that the pages can track when exactly the battery

Fingerprinting of battery status?

2015-08-03 Thread Chris Peterson
What is a legitimate use case for a web page to know my battery status? Battery level and time remaining can be used to fingerprint users. A mobile webapp might use battery level to throttle its activity, but that could be something the OS handles by pausing or throttling apps directly or