Add permission dialog to access devicemotion and deviceorientation data for Safari

Originator:KrauseFx
Number:rdar://34234813 Date Originated:September 3 2017
Status:Resolved Resolved:February 2019
Product:Safari Product Version:
Classification: Reproducible:
 
Summary:
Modern web browsers give the user more control over what data they're sharing with websites, for example location services and access to the camera.

However I recently noticed a gap of how websites can determine the activity of the user based on the acceleration and gyro sensor built into modern smartphones, including the iPhone and Google Pixel.

Using that data, web apps can determine if the user is using their phone while

- sitting
- standing
- walking
- running
- driving
- taking a picture
- lying in bed

and probably more, including guesses if the user is actively using their phone at this moment, or even if they're impaired by alcohol.

I got a super basic prototype of how companies can (ab)use that data on GitHub: https://github.com/KrauseFx/whats-the-user-doing

I also attached the index.html in its current status, the most up to date version will be on GitHub.

Comments

This is Insane

Or consider looking/implementing https://www.w3.org/TR/generic-sensor/ to then deprecate the old API. This new API goes in Origin Trial in Chrome 62.

By darktears31 at Sept. 7, 2017, 6:18 p.m. (reply...)

Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!