Gyroscope access in JS - potential security issue?

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Gyroscope access in JS - potential security issue?

silverskullpsu
I found a paper from 2014 describing a way to use gyroscope data from a mobile phone's sensors to reconstruct speech:

https://crypto.stanford.edu/gyrophone/files/gyromic.pdf

Does Firefox for Android take any measures to protect against this? For example, filtering the data before presenting it to JS code rather than providing the raw data.
_______________________________________________
dev-security mailing list
[hidden email]
https://lists.mozilla.org/listinfo/dev-security
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Gyroscope access in JS - potential security issue?

Francois Marier
On 21/06/17 03:27 PM, [hidden email] wrote:
> I found a paper from 2014 describing a way to use gyroscope data from
> a mobile phone's sensors to reconstruct speech:
>
> https://crypto.stanford.edu/gyrophone/files/gyromic.pdf

There's an open bug for that issue at
https://bugzilla.mozilla.org/show_bug.cgi?id=1292751

Francois
_______________________________________________
dev-security mailing list
[hidden email]
https://lists.mozilla.org/listinfo/dev-security
Loading...