Live data from Hacker News

Malicious Use of the HTML5 Vibrate API

shkspr.mobi

41–50 of 67 posts

Re: Malicious Use of the HTML5 Vibrate API

#41
post #38
post #33

Windows Phone, once again safe from the dangers of the Internet standards and features!

As a side note to web developers dealing with audio: MP3 is really the "plays everywhere" audio format for HTML5 audio. Firefox was the last holdout, and they capitulated last year [1]; FF for XP and up and FF for Mac now support MP3. There are very few practical reasons not to use MP3. [1]: http://stackoverflow.com/questions/4923136/why-doesnt-firefo...

You'll block out some Linux users who don't want to violate patents, though. And as the other branch of this discussion painfully illustrates, Windows Mobile.

Re: Malicious Use of the HTML5 Vibrate API

#42
post #37
post #33

Windows Phone, once again safe from the dangers of the Internet standards and features!

Hahah. I just tested this on my Windows Phone, Nokia 925, and yeah, not only does it not vibrate, but it doesn't play the audio. The audio was a surprise, since it runs my HTML5 radio software just fine. I'm guessing the demo used OGG or some other audio format not supported by mobile IE.

Nope. Just standard .mp3 in the demo.

Re: Malicious Use of the HTML5 Vibrate API

#43
post #37
post #33

Windows Phone, once again safe from the dangers of the Internet standards and features!

Hahah. I just tested this on my Windows Phone, Nokia 925, and yeah, not only does it not vibrate, but it doesn't play the audio. The audio was a surprise, since it runs my HTML5 radio software just fine. I'm guessing the demo used OGG or some other audio format not supported by mobile IE.

I'm guessing the demo used OGG or some other audio format not supported by mobile IE.

The demo uses MP3.

Re: Malicious Use of the HTML5 Vibrate API

#45
post #27

It ALWAYS needs to be an "Ask First" approach in the browser. I'm starting to have flashbacks of the days when people had music players that autoplay on websites, and how I hated that.

This gets obnoxious very quickly. Current Firefox excludes Flash from click-to-play because user were outraged against it. And note that Flash can do all of these things.

Compared to having your phone vibrate ad nauseum for no determinable reason whatsoever?

Re: Malicious Use of the HTML5 Vibrate API

#46
post #27

Earlier quoted context omitted.

This gets obnoxious very quickly. Current Firefox excludes Flash from click-to-play because user were outraged against it. And note that Flash can do all of these things.

Compared to having your phone vibrate ad nauseum for no determinable reason whatsoever?

Look at this way: pages using Vibrate won't necessarily obnoxiously vibrate for no determinable reason.

But all of them will pop up the permission prompt.

Re: Malicious Use of the HTML5 Vibrate API

#48
When he says it would be possible to completely imitate a real call using web rtc and vibrate, what I hear is that this API combined with webRTC could replace phone calls.

Sure you could install a skype ap, but this opens the way to companies running a private, webapp based voip system. In much the same way as they might use Jabber now. All we need now is a decent opensource desktop voip ap to pair it with.

Re: Malicious Use of the HTML5 Vibrate API

#49
post #2

It doesn't even have to be a website. Phone scammers have been doing stuff like this for ages with pretty low tech. A general rule of dealing with spam like this is "if the source is unknown and it's from a pretty woman or an investment firm, it's a scam". My phone's black list is quite long. Of course, HTML-based ones can reach a larger number of users with little investment, so it's reasonable to expect this will o…

How do you know if the woman on the other end is pretty? :) There's a great app for Android (in Sweden, I suppose there are similar apps for other countries) that searches digital phone registries on an incoming call and after about a second displays whatever data it has found on the incoming call screen (such as Telemarketing Company, Salesperson, etc) It also uses some form of rating system so if enough users have…

Which app, if you don't mind me asking?

Re: Malicious Use of the HTML5 Vibrate API

#50
post #44

This could be another vector for transmitting data out of a device without detection.

Without detection? Are you serious?

Without detecting that actual data is transmitted and not just some random vibration.

I don't know how exact those motors are, but I could imagine it is possible that even 2-3s of vibration could easily transmit a password.

Post reply on HN