[deviceorientation] Security/privacy consideration: cross-origin linkage from Wendy Seltzer via GitHub on 2016-12-01 (public-geolocation@w3.org from December 2016)

From: Wendy Seltzer via GitHub <sysbot+gh@w3.org>
Date: Thu, 01 Dec 2016 21:13:55 +0000
To: public-geolocation@w3.org
Message-ID: <issues.opened-192963889-1480626833-sysbot+gh@w3.org>

wseltzer has just created a new issue for 
https://github.com/w3c/deviceorientation:

== Security/privacy consideration: cross-origin linkage ==
Since all origins displayed to a device will share the same pattern of
 device orientation changes, this API may provide an avenue for 
cross-origin correlation. If that threat can't be mitigated, it should
 at least be noted (and user agents may want to disable access or 
provide users a means to disable access to these data)

Please view or discuss this issue at 
https://github.com/w3c/deviceorientation/issues/33 using your GitHub 
account

Received on Thursday, 1 December 2016 21:14:01 UTC