4 ms·

It is not impossible to conceive of malicious code being able to exploit an unpatched browser flaw and overdrive the motor to destruction. Uhm, if your argumen

by gcp 13y ago

It is not impossible to conceive of malicious code being able to exploit an unpatched browser flaw and overdrive the motor to destruction. Uhm, if your argument against a HTML5 API is "it's possible that the browser is hackable" then I don't see the discussion going very far. Like, you can use the same argument against HTTP support. Combine it with a WebRTC call and you're looking at a very convincing scam. WebRTC does require explicit user permissions. I honestly don't see how the buzzing is in anyway crucial in in the explained examples. You can mimic real UI and trick users. This has been around on desktop for ages with fake Windows dialogs. Take away the buzz in the example on the webpage and the majority of people will still "pick up the phone".

edent 13y ago
(OP here) It's certainly not "crucial" - but it's a lot easier to trick someone by exploiting their brain's heuristics. Phone vibrating means alert. I think that could be enough to trick people into overlooking elements like the title bar being visible, etc. For example, I've noticed that some dodgy web adverts play the default Windows Error.wav when displaying a fake "Your codecs need updating" error dialogue. Not crucial, but adds credence. I agree that the browser hacking is unlikely and probably shouldn't be mentioned.
- callum85 13y ago
  > I agree that the browser hacking is unlikely and probably shouldn't be mentioned. It's not that it's unlikely, it's just irrelevant. "We might accidentally introduce a security flaw" could be used as an argument against building absolutely anything.
gus_massa 13y ago
My mayor concern was: > Autoplaying sound on adverts in annoying - auto-vibration could be just as irritating. Sound can be mutated. I don’t know how difficult could be to turn off the vibration.
- grrowl 13y ago
  Hopefully a Chrome-like "prevent this page affecting vibration" dialog.

by gcp 13y ago

edent 13y ago

(OP here) It's certainly not "crucial" - but it's a lot easier to trick someone by exploiting their brain's heuristics. Phone vibrating means alert. I think that could be enough to trick people into overlooking elements like the title bar being visible, etc. For example, I've noticed that some dodgy web adverts play the default Windows Error.wav when displaying a fake "Your codecs need updating" error dialogue. Not crucial, but adds credence. I agree that the browser hacking is unlikely and probably shouldn't be mentioned.

callum85 13y ago
> I agree that the browser hacking is unlikely and probably shouldn't be mentioned. It's not that it's unlikely, it's just irrelevant. "We might accidentally introduce a security flaw" could be used as an argument against building absolutely anything.

gus_massa 13y ago

My mayor concern was: > Autoplaying sound on adverts in annoying - auto-vibration could be just as irritating. Sound can be mutated. I don’t know how difficult could be to turn off the vibration.

grrowl 13y ago
Hopefully a Chrome-like "prevent this page affecting vibration" dialog.