Firefox Cuts Website Access to Battery API Over Privacy Concerns

Firefox is dropping a feature that lets websites access the Battery Status API to run into how much bombardment life a visiting auto has left. Mozilla decided to cut this website access in Firefox 52 following security inquiry showing that it could exist used to track users browsing habits.

Firefox 52 drops back up to bombardment API that allows sites to runway users

Mozilla introduced Battery Condition API in 2022 to permit websites, apps and extensions to admission the API to learn nigh the device'southward battery charge and discharge times, whether the device is plugged in, how long it will concluding, and remaining battery level. This API was designed to allow websites to offer less energy-intensive versions of their services to visitors with little battery left.

Merely, the browser grants admission to this information direct, without any permission request process that could forestall whatsoever site from having this access:

The API divers in this specification is used to determine the battery status of the hosting device. The data disclosed has minimal impact on privacy or fingerprinting, and therefore is exposed without permission grants. For example, authors cannot directly know if there is a bombardment or not in the hosting device.

Back in 2022, security researchers revealed that it was easy to abuse the API to rail browsing on the internet. One of the major concerns shared by researchers included how a website can link a user in a private browsing style.

"Users who effort to revisit a website with a new identity may use browsers' private mode or clear cookies and other client side identifiers. When consecutive visits are made within a short interval, the website can link users' new and former identities by exploiting battery level and accuse/discharge times." Researchers warned [PDF] that "the website can then re-instantiate users' cookies and other client side identifiers, a method known as respawning."

To better user privacy while using Firefox, Mozilla has now decided to cut access to the feature. Starting with Firefox 52, websites are non exist able to admission the API which ways it won't be used for tracking purposes. The change affects both the desktop and mobile versions of the Firefox browser. However, the API volition remain open to extensions and Firefox itself.

Source: https://wccftech.com/firefox-cuts-battery-api-privacy-concerns/

Posted by: duckwifeentent1998.blogspot.com

Share this post