Re: [b2g] WebAPI Security Discussion: Vibration API

2012-04-18 Thread Lucas Adamski
On Apr 18, 2012, at 10:29 PM, Justin Lebar wrote: >> Could it be limited to both foreground content that is the top level >> window? That way ads in iframes won't be able to annoy the user as much >> (and websites can ensure that ads won't be annoying by putting them in >> frames). > > I can't th

B2G Runtime Security Model

2012-04-18 Thread Lucas Adamski
Much anticipated, here is a high-level overview of the B2G runtime security model. We are calling this the "runtime" B2G security model to avoid confusion with the underlying Linux OS security model, though obviously the two are closely interrelated so this document touches on the latter as wel

Re: [b2g] WebAPI Security Discussion: Vibration API

2012-04-18 Thread Justin Lebar
> I didn't see this called out, but how do we think about vibration triggers > for the notification use case from SMS/3rd party apps? We think about this as a completely separate "notifications" API. This API is separate because it may not directly let pages frob the vibrator -- if I've globally

Re: WebAPI Security Discussion: Vibration API

2012-04-18 Thread Adrienne Porter Felt
Could it be limited to both foreground content that is the top level window? That way ads in iframes won't be able to annoy the user as much (and websites can ensure that ads won't be annoying by putting them in frames). On Thu, Apr 19, 2012 at 3:44 AM, Lucas Adamski wrote: > Updated proposal.

Re: [b2g] WebAPI Security Discussion: Vibration API

2012-04-18 Thread Chris Lee
On Apr 18, 2012, at 6:44 PM, Lucas Adamski wrote: > Updated proposal. Note that since only foreground content can trigger > vibrator, this seems equivalent to other potentially annoying feedback > mechanisms and should be implicit for uninstalled web content… thoughts? I didn't see this calle

Re: [b2g] WebAPI Security Discussion: Web SMS API

2012-04-18 Thread Chris Lee
Hi all, Here are the use cases defined by the feature today: Tom wants send a text message and selects the SMS app Tom can send a new message by: Selecting an existing contact from the Contacts app list Entering a phone number Tom is notified of all incoming messages whether he's in the SMS app, o

Re: WebAPI Security Discussion: Vibration API

2012-04-18 Thread Lucas Adamski
Updated proposal. Note that since only foreground content can trigger vibrator, this seems equivalent to other potentially annoying feedback mechanisms and should be implicit for uninstalled web content… thoughts? Name of API: Vibration Reference: http://dev.w3.org/2009/dap/vibration/ Brief pu

Re: WebAPI Security Discussion: Screen Orientation

2012-04-18 Thread Lucas Adamski
Updated proposal per comments. I ended up trying to reconcile the various points more than simply documenting them so please review carefully as I likely missed something. :) Name of API: Screen Orientation Reference: bug 720794 bug 673922 Brief purpose of API: Get notification when screen ori

WebAPI Security Discussion: Web SMS API

2012-04-18 Thread Lucas Adamski
Updated proposal per comments. Looking to close this out unless there are further concerns or discussions in the next 48 hours or so. Name of API: Web SMS API References: https://bugzilla.mozilla.org/show_bug.cgi?id=674725 Brief purpose of API: Send and recieve SMS messages General Use Cases: N

Re: Poorly worded error message for cert for wrong site.

2012-04-18 Thread ianG
Yeah, this is one of those edge cases where certs just don't do a good job. you have to remember (or learn) that when certificates were invented, they were invented by the telecommunications companies back in the days when people had one telephone line, one number, one family unit, and that wa

Re: WebAPI Security Discussion: Resource Lock API

2012-04-18 Thread Lucas Adamski
On Apr 17, 2012, at 6:02 AM, Benjamin Smedberg wrote: > On 4/16/2012 2:18 AM, Lucas Adamski wrote: > Why can't we just let all content have access to this API by default, at > least when it is in the foreground? I really don't think we need to make > users choose whether websites can turn off th

Poorly worded error message for cert for wrong site.

2012-04-18 Thread John Nagle
Here's an example of Firefox producing a confusing error message: https://www.citigroup.com/ Citigroup is using the EV cert of one of their business units, "citibank.com". This is sloppy of them. Firefox's warning message: This Connection is Untrusted You have asked Firefox to connec

Re: [b2g] WebAPI Security Discussion: Camera API

2012-04-18 Thread Lucas Adamski
At a high level the proposals are similar in the notification model - either way we'd have a persistent indicator while the camera is being accessed. The main difference is how permission to the camera is granted. Whether its done with: a) a combination of install-time and run-time UI "dialog"

Re: WebAPI Security Discussion: Open Web App API

2012-04-18 Thread Fabrice Desré
On 04/16/2012 10:22 AM, Jim Straus wrote: How about un-install an app, update an app (assuming that the app has a cached component and we can distinguish when cached components change, and also that we desire that the user can control when an app is updated). I also think that the risks for som

Re: WebAPI meta: permission prompts considered harmful

2012-04-18 Thread Mounir Lamouri
On 04/17/2012 10:35 PM, Jim Straus wrote: > What does an upload button look like (that is distinguishable from other > buttons?) How does the upload communicate where it is going to upload that is > not spoof-able by an application? Can an upload button protect from an app > uploading other inf