←back to thread

428 points coronadisaster | 2 comments | | HN request time: 0.004s | source
Show context
phkahler ◴[] No.23677378[source]
Those APIs should not exist. Web site creators need to stop acting like they are entitled to access whatever they want on someone's computer.

I dont care about your unique SaS usecase, these are invasive. Make a native app if that's what you need.

replies(3): >>23677439 #>>23677650 #>>23679378 #
azangru ◴[] No.23677650[source]
Why is accessing this via a native app better than accessing it via web browser?
replies(4): >>23677681 #>>23678522 #>>23678723 #>>23680258 #
danaris ◴[] No.23678723[source]
Creating these APIs doesn't just grant access to them to well-thought-out PWAs with a clear use case.

It grants access to every shady malware ad that wants to siphon your data and that of everyone around you.

replies(3): >>23679168 #>>23679432 #>>23679693 #
1. azangru ◴[] No.23679168[source]
> It grants access to every shady malware ad that wants to siphon your data and that of everyone around you.

Can't native apps do so as well?

replies(1): >>23680863 #
2. danaris ◴[] No.23680863[source]
Well, first of all, there's a massive difference of threat scale between "the apps I have personally chosen to download and install" and "every website that I visit, even if only for a moment."

Second of all, there's no App Store review process for malicious websites. An app that wants to harvest your data will at least have to have some vaguely plausible useful purpose in order to even have a chance to try.

So I don't know about you, but personally, if you were to ask me, "Do you think a restriction that reduces the number of people able to harvest your data in this particular way by about 90%, or is it totally useless if it's not 100%?", I'd say go for the 90% solution rather than just throwing up my hands and saying it's hopeless.