Bystander Privacy Considerations

[jasonanovak]

At the Permissions Workshop, @NellWaliczek, @avadacatavra, and I talked and it was suggested that I file an issue on bystander privacy and WebXR. By "bystander privacy", I mean the notion of "how does a user who is in the same room as someone using an XR device know whether an image of them is being captured by the person using the XR device", and, by extension, if the XR device is also profiling them.

This is somewhat related to the Real World Geometry Threat Vectors User PII threat of "Users may be identified by learning the geometry of their face, or through gait analysis" but to others in a room where an XR experience is taking place.

[peterclemenko]

This is a valid concern, also compounded by the thread here: #18 about SLAM in JS. A JS SLAM implementation as forced by Safari in the latest builds would cause a situation where a malicious attacker could stream data from around you. This could easily not just cause privacy issues, but possible corporate espionage using the cameras to stream data of things like prototypes or documents.