Skip to content

Commit

Permalink
Add Web Bluetooth (harmful) (#364)
Browse files Browse the repository at this point in the history
* Add Web Bluetooth (harmful)

This is a straight extrapolation from WebUSB.  I found very little in
the proposal to suggest that Web Bluetooth was any better, and the lack
of the basic protections in WebUSB make it clearly worse.

Closes #95.

* This has a bug. ...and a caniuse name

Co-authored-by: L. David Baron <dbaron@dbaron.org>

Co-authored-by: L. David Baron <dbaron@dbaron.org>
  • Loading branch information
martinthomson and dbaron authored Jun 12, 2020
1 parent 82d8a6f commit 6221200
Show file tree
Hide file tree
Showing 2 changed files with 13 additions and 0 deletions.
12 changes: 12 additions & 0 deletions activities.json
Original file line number Diff line number Diff line change
Expand Up @@ -938,6 +938,18 @@
"title": "Web Background Synchronization",
"url": "https://wicg.github.io/BackgroundSync/spec"
},
{
"ciuName": "mdn-api_bluetooth",
"description": "This document describes an API to discover and communicate with devices over the Bluetooth 4 wireless standard using the Generic Attribute Profile (GATT).",
"id": "web-bluetooth",
"mozBugUrl": "https://bugzilla.mozilla.org/show_bug.cgi?id=674737",
"mozPosition": "harmful",
"mozPositionDetail": "This API provides access to the Generic Attribute Profile (GATT) of Bluetooth, which is not the lowest level of access that the specifications allow, but its generic nature make it impossible to clearly. Like <a href=\"#webusb\">WebUSB</a> there is significant uncertainty regarding how well prepared devices are to receive requests from arbitrary sites. The generic nature of the API means that this risk is difficult to manage. The Web Bluetooth CG has opted for weaker protections than those in WebUSB, which require active consent to communicate from the device. This proposal uses a blocklist, which will require constant and active maintenance so that vulnerable devices aren't exploited. This model is unsustainable and presents a signficant risk to users and their devices.",
"mozPositionIssue": 95,
"org": "Proposal",
"title": "Web Bluetooth",
"url": "https://webbluetoothcg.github.io/web-bluetooth/"
},
{
"ciuName": null,
"description": "This specification describes an API that can be used to retrieve the amount of budget an origin has available for resource consuming background operations, as well as the cost associated with doing such an operation.",
Expand Down
1 change: 1 addition & 0 deletions activities.py
Original file line number Diff line number Diff line change
Expand Up @@ -526,6 +526,7 @@ def html_url(doc_name):
"www.w3.org": W3CParser,
"w3c.github.io": W3CParser,
"wicg.github.io": W3CCGParser,
"webbluetoothcg.github.io": W3CCGParser,
"privacycg.github.io": W3CCGParser,
"dev.w3.org": W3CParser,
"dvcs.w3.org": W3CParser,
Expand Down

0 comments on commit 6221200

Please sign in to comment.