Disclosure of user actions through JavaScript with motion and orientation sensors

Discussion in 'privacy general' started by TheWindBringeth, Apr 28, 2016.

  1. TheWindBringeth

    TheWindBringeth Registered Member

    Joined:
    Feb 29, 2012
    Posts:
    2,089
    Reviewing FF46 stuff, I noticed a supposedly fixed security vulnerability:

    https://www.mozilla.org/en-US/security/advisories/mfsa2016-43/
    Sort of rang a bell, but didn't spot a thread more recent than a paper I found. In case it wasn't previously mentioned...

    TouchSignatures: Identification of User Touch Actions and PINs Based on Mobile Sensor Data via JavaScript
    https://arxiv.org/abs/1602.04115
    Interesting, and a bit disturbing, how sensor data can be exploited. Hopefully, all [mobile] browsers and the specs are fixed by now or soon will be.
     
  2. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    6,030
    Indeed. Those sensors are powerful.
     
Loading...