On Thu, Mar 15, 2012 at 9:50 PM, Justin Lebar <justin.le...@gmail.com> wrote:
> On Thu, Mar 15, 2012 at 5:44 PM, David Chan <dc...@mozilla.com> wrote:
>> Sorry I should have used the same nomenclature  that was used earlier.
>>
>> Polling as in the app repeated asks for geolocation because it "failed".
>> Having different failures for denied vs can't lock onto GPS would solve
>> this, but I don't know how much it matters for an app.
>
> We design our APIs so they don't have this problem, in general.

 it's not an APIs issue, justin.  i believe david is referring to
dealing with the case where apps try to bully the user into granting
the permission against their will and better judgement, just to get
rid of the app repeatedly advising them... *in the app*, after they've
explicitly said "NO".

 scenario:

 * application requests access to geolocation
 * user says "no".
 * application responds by creating a timer that goes off every 30 seconds
 * on each timer ping, application puts up a popup "you didn't give me
access to geolocation.  GIVE ME ACCESS TO GEOLOCATION".

that's harrassment.

what do you do about this (extreme) situation, and subtle (less
extreme) variants thereof?

l.
_______________________________________________
dev-security mailing list
dev-security@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security

Reply via email to