ISSUE-64 (hidingIsHard): "Generic" sensors may permit discovering sensitive information [System Information and Events API]

ISSUE-64 (hidingIsHard): "Generic" sensors may permit discovering sensitive information [System Information and Events API]

http://www.w3.org/2009/dap/track/issues/64

Raised by: Thomas Roessler
On product: System Information and Events API

Generic sensors, e.g., discovery of nearby wireless networks, MAC addresses of access points, etc may permit localizing the device (and its user). Access control policies for such sensors need to be aligned with access to the more sensitive information that can be inferred.

I suspect that a piece of this issue is really a question for the policy work; as far as the system info API is concerned, this issue feeds into security considerations and is another reason why the network information API should be removed from the specification.

Received on Wednesday, 6 January 2010 15:59:31 UTC