New API caused privacy panic: page to call the cell phone camera, centimeter-level positioning! -Mobile location privacy-IT information

IT news , August 29, W3C World Wide Web Consortium is working to create a universal, based on the JavaScript API, the name is called "proximity". Numerous calls to surrounding access sensors for smart devices, it also raises many concerns about personal privacy.

Through this API, Web sites and advertisers can get access to nearby mobile phones, flat or Internet device location information, but also have two modes, one can only be a rough indication of distance, one can fine directly to the cm level.

Other than the positioning, the API also called smart device before and after cameras, motion sensors, and so on, so as to get the user to use the equipment and frequencies, even users face and distance between the equipment and so on.

France INRIA (computer and automation Research Institute) security and privacy technical engineer Lukasz Olejnik made a strong criticism, he felt that the sensor API to have access to the user's authorization, and be sure to tell which site the user is using the API, call frequency. Cm-level precision positioning, Olejnik said there is no need to do this.

W3C currently has accepted Olejnik's proposal will be added to the API authorization reminder feature, but cm-level GPS are still preserved.

新API引发隐私泄露恐慌：网页可调用手机摄像头，厘米级定位！ - 手机定位,个人隐私 - IT资讯

IT资讯8月29日消息，W3C万维网联盟正在着手打造一款通用的、基于JavaScript的API，名称叫做“近距离传感”。它对周边接入智能设备传感器的大量调用，也引发了很多人对于个人隐私泄露的担忧。

通过这个API，网站和广告投放者可以获取附近接入的手机、平板或者是物联网设备的位置信息，而且具备两种模式，一种只能用来粗略指示远近，另一种则可以直接精细到厘米级别。

除了定位之外，这个API还能调用智能设备的前后摄像头、运动加速度传感器等等，从而获取用户使用设备的方式和频率，甚至是用户面部与设备之间的距离等。

法国INRIA（计算机科学和自动化研究机构）安全与隐私技术工程师lukasz Olejnik对此提出了强烈批评，他认为API要调用传感器必须获得用户的授权，并明确告知用户是哪些网站在使用这个API、调用的频次如何。至于厘米级的精准定位，Olejnik称完全没有必要做到这种程度。

W3C目前已经接受了Olejnik的提议，将在API中加入授权提醒功能，不过厘米级的定位功能依旧得到保留。