29 ms·

Pop up a dialog asking for permission to scan for devices.

by JanSt 4y ago

dmitriid 4y ago
That's not a working security model when it's required for about a dozen such permissions (camera, mike, location, bluetooth, serial ports, midi, ambient light, gyroscopes, hid, ...) Chrome doesn't care and pushes these out. Safari and Mozilla: protections in these specs are inadequate for the large surface area and complexity that these APIs require
- mtomweb 4y ago
  That’s a week cop out from Apple when they offer far less protection in Native and allow apps to use Bluetooth to monitor your location. Web Bluetooth has much BETTER security and privacy than native. By not providing functionality it forces apps to use the AppStore.
  - dmitriid 4y ago
    > That’s a week cop out from Apple Too bad Mozilla also thinks the same way. > By not providing functionality it forces apps to use the AppStore. Nice conspiracy theory. I wonder if Mozilla execs are in on it.
    - mtomweb 4y ago
      Mozilla seems to have come around with WebMIDI, so thats a good step in the right direction. The functionality is not limited to device APIs, it covers every aspect of the browser. See: https://open-web-advocacy.org/walled-gardens-report/#hobbled-competition-even-within-safari-clones https://open-web-advocacy.org/walled-gardens-report/#hobbled... and https://open-web-advocacy.org/walled-gardens-report/#missing-functionality https://open-web-advocacy.org/walled-gardens-report/#missing...
      - dmitriid 4y ago
        > Mozilla seems to have come around with WebMIDI And yet, we are in a thread about WebBluetooth. Both Safari and Mozilla have the same stance: until a proper solution for privacy issues with hardware specs is found, we oppose them. For WebMIDI it seems Mozilla has found a solution they are happy with. I wouldn't hold mu breath for others. The links you provided assume Mozilla is in on Apple conspiracy, too. It's also a very one-sided take which completely ignores the elephant in the room. See this: https://www.quirksmode.org/blog/archives/2021/08/breaking_the_we.html https://www.quirksmode.org/blog/archives/2021/08/breaking_th...
    - mtomweb 4y ago
      Web Bluetooth is significantly safer than native bluetooth + the safest car is the one that doesn't start is not a good direction for the web.
mtomweb 4y ago
FYI only native signs a blank cheque and lets you scan for devices in the background. Web Bluetooth requires the browser itself to connect to a device and specify a service for you to connect too.

Pop up a dialog asking for permission to scan for devices.

by JanSt 4y ago

Pop up a dialog asking for permission to scan for devices.

That's not a working security model when it's required for about a dozen such permissions (camera, mike, location, bluetooth, serial ports, midi, ambient light, gyroscopes, hid, ...) Chrome doesn't care and pushes these out. Safari and Mozilla: protections in these specs are inadequate for the large surface area and complexity that these APIs require

mtomweb 4y ago
That’s a week cop out from Apple when they offer far less protection in Native and allow apps to use Bluetooth to monitor your location. Web Bluetooth has much BETTER security and privacy than native. By not providing functionality it forces apps to use the AppStore.
- dmitriid 4y ago
  > That’s a week cop out from Apple Too bad Mozilla also thinks the same way. > By not providing functionality it forces apps to use the AppStore. Nice conspiracy theory. I wonder if Mozilla execs are in on it.
  - mtomweb 4y ago
    Mozilla seems to have come around with WebMIDI, so thats a good step in the right direction. The functionality is not limited to device APIs, it covers every aspect of the browser. See: https://open-web-advocacy.org/walled-gardens-report/#hobbled-competition-even-within-safari-clones https://open-web-advocacy.org/walled-gardens-report/#hobbled... and https://open-web-advocacy.org/walled-gardens-report/#missing-functionality https://open-web-advocacy.org/walled-gardens-report/#missing...
    - dmitriid 4y ago
      > Mozilla seems to have come around with WebMIDI And yet, we are in a thread about WebBluetooth. Both Safari and Mozilla have the same stance: until a proper solution for privacy issues with hardware specs is found, we oppose them. For WebMIDI it seems Mozilla has found a solution they are happy with. I wouldn't hold mu breath for others. The links you provided assume Mozilla is in on Apple conspiracy, too. It's also a very one-sided take which completely ignores the elephant in the room. See this: https://www.quirksmode.org/blog/archives/2021/08/breaking_the_we.html https://www.quirksmode.org/blog/archives/2021/08/breaking_th...
  - mtomweb 4y ago
    Web Bluetooth is significantly safer than native bluetooth + the safest car is the one that doesn't start is not a good direction for the web.

mtomweb 4y ago

FYI only native signs a blank cheque and lets you scan for devices in the background. Web Bluetooth requires the browser itself to connect to a device and specify a service for you to connect too.