Stealing sensitive browser data with the W3C Ambient Light Sensor API (2017)
Report a link problem
Submission timeline
2007–2026One slot for every year since HN launched. Height is that year's peak points; orange marks a 100+ point or 50+ comment breakout. Select a bar to open its strongest thread.
First comments on top threads
HN comment order> There is currently an ongoing discussion within a W3C Device and Sensors Working Group whether to allow websites access the light sensor without requiring the user’s permission. Why is this even a thing? Just make this the same as location or microphone prompts? I never understood the fear of being transparent or give choice to users. I hope at least firefox has a setting to permanently disable this feature.
What was the purpose of exposing the Ambient Light Sensor to web pages in the first place? The W3C document[0] has a few suggestions: > A Web application provides input for a smart home system to control lighting. > A Web aplication checks whether light level at work space is sufficient. > A Web application calculates settings for a camera with manual controls (apperture, shutter speed, ISO). > A Web application monitors light level changes produced by hovering hand user…
The first top-level comment from each of the four biggest threads, in HN’s own order. Excerpts are shortened; open a comment for full context.
- Breakout years
- 2
- Total points
- 232
- Total comments
- 77
100+ points or 50+ comments
reference only — not used in Hall rules or ranking
reference only — not used in Hall rules or ranking
Every submission
| Date | Title as submitted | By | Points | Comments |
|---|---|---|---|---|
| 2017-04-19 | Stealing web browser history using W3C Ambient Light Sensors | Wartha | 3 | 0 |
| 2017-04-19 | Smartphone and laptop light sensors leaking private data | Djanna | 3 | 0 |
| 2017-04-28 | Stealing Sensitive Browser Data with the W3C Ambient Light Sensor API | ivank | 2 | 0 |
| 2017-05-10 | Stealing Sensitive Browser Data with the W3C Ambient Light Sensor API | uptown | 2 | 0 |
| 2017-06-26 | Smartphone light sensors used to steal web browser history | shashax | 2 | 0 |
| 2017-10-18 | Stealing Sensitive Browser Data with the W3C Ambient Light Sensor APIFirst breakout | epaga | 105 | 26 |
| 2017-10-18 | Stealing Sensitive Browser Data with the W3C Ambient Light Sensor API | geekrax | 1 | 0 |
| 2019-04-03 | Stealing sensitive user data with smartphone light sensor () | t1m1dd | 1 | 0 |
| 2019-10-14 | Stealing sensitive browser data with the W3C Ambient Light Sensor API (2017)Best thread · Latest 20+ point return | chrixs | 113 | 51 |