Live data from Hacker News

Mozilla says Chrome’s latest feature enables surveillance

howtogeek.com

41–50 of 122 posts

Re: Mozilla says Chrome’s latest feature enables surveillance

#41

Think about it: if a device's gyroscope is left idle, it presumes the behavior of a virtual machine. I imagine trust scores use this as a metric when deciding if the user is human or a machine: `device was left in the same geo-coords for a long period of time`: then it is a bot.

Or a desktop. Or my laptop on a table. This is tangential to the articles topic

Re: Mozilla says Chrome’s latest feature enables surveillance

#42
post #39
post #19

I am a privacy-conscious person but I really wish these debates could be a little more nuanced. This API is behind a permission prompt that can only be triggered in response to a user gesture, so the bar to entry is high. The example on web.dev is a chat app that would automatically set an active/away status: seems useful! IMO I ought to have the ability to cash in some of my privacy chips (so to speak) on a site tha…

> active/away status This can easily be abused for stalkerish behavior. Even read receipts in chat apps like Facebook should be able to be disabled by the user. (You can, with some JS injection, but basically that means programmers' privacy is respected and non-programmers' privacy is violated.) Also micromanagement. I once had a coworker who would "pounce" on me when my Slack status became active, instead of respect…

> This can easily be abused for stalkerish behavior

Well, sure. Any away/active status can be used for bad things. Pretty much any form of text communication can, too. We all opt in and out of things according to our level of comfort, like with the permission prompt this API provides.

Re: Mozilla says Chrome’s latest feature enables surveillance

#43
post #22

How does Chrome find out? Is it watching my camera? Or just no mouse or keyboard activity for a while — because if the latter, my website could already know that. We built an app for distance learning which put something a lot more invasive (but with permission)… namely eye tracking and facial recognition to see whether the kids are paying attention. It’s actually LESS invasive than the current alternative — requirin…

Likely it's using keyboard and mouse tracking. I'm not a fan of this at all.

Re: Mozilla says Chrome’s latest feature enables surveillance

#44

Think about it: if a device's gyroscope is left idle, it presumes the behavior of a virtual machine. I imagine trust scores use this as a metric when deciding if the user is human or a machine: `device was left in the same geo-coords for a long period of time`: then it is a bot.

You're assuming mobile only. Laptops don't have gyroscopes.

Re: Mozilla says Chrome’s latest feature enables surveillance

#45

Earlier quoted context omitted.

I've used Firefox for over a decade and a half and haven't ever had a use breaking issue where I felt the need to switch. Where are you getting this idea it's not a viable alternative? More likely their share is smaller because they're competing against one of the largest companies in the world.

Yeah, I'm genuinely puzzled as to where these commenters are coming from. FF is a fantastic product and I have it installed all my devices after moving away from Chrome and Google products. I also managed to convince our IT to ship it as default on all of our company PCs.

I push both out to my users. Most people don't us FF but they're getting whether they like it or not ha ha.

Re: Mozilla says Chrome’s latest feature enables surveillance

#46
I think the real story here is that the browser has really become the OS. But whereas before we left all decisions up to the users about what they could install and trust, and they trusted the dev to not do anything nefarious, the browser makers realized that users are a bad judge of character and devs cannot be trusted to be honest. So the browsers created a complex api access process to protect users from bad actors.

To move this sort of paradigm back into OS would require a wholesale re-write of APIs and how they're accessed.

Surprise! Both Apple and Microsoft did that, but neither of their new APIs caught on, because the benefit of being a native app was outshined by losing the easy access to the user data. So from the dev's stand point they may as well get the benefits of cross platform that web-apps afford if they're gonna have to deal with the gate-keeping anyways; native performance be damned.

Re: Mozilla says Chrome’s latest feature enables surveillance

#49
post #38
post #19

I am a privacy-conscious person but I really wish these debates could be a little more nuanced. This API is behind a permission prompt that can only be triggered in response to a user gesture, so the bar to entry is high. The example on web.dev is a chat app that would automatically set an active/away status: seems useful! IMO I ought to have the ability to cash in some of my privacy chips (so to speak) on a site tha…

> The example on web.dev is a chat app that would automatically set an active/away status: seems useful! Okay, but you can already do that.

How? You need a native app gor that. A web app can only know whether a user is actiwe _on the webpage_

Re: Mozilla says Chrome’s latest feature enables surveillance

#50
post #19

I am a privacy-conscious person but I really wish these debates could be a little more nuanced. This API is behind a permission prompt that can only be triggered in response to a user gesture, so the bar to entry is high. The example on web.dev is a chat app that would automatically set an active/away status: seems useful! IMO I ought to have the ability to cash in some of my privacy chips (so to speak) on a site tha…

> This API is behind a permission prompt that can only be triggered in response to a user gesture, so the bar to entry is high.

It really isn't. Some time look at the permissions controls in Chrome. https://twitter.com/dmitriid/status/1434086651362430976?s=20

Most of these toggles will pop up a permissions dialog. Trigger enough of those, and the user will either dismiss them automatically or accept automatically.

Post reply on HN