Slashdot Mirror


W3C Group Proposed To Safeguard User Agent State Privacy

First time accepted submitter FredAndrews writes "A Private User Agent W3C Community Group has been proposed to tackle the privacy of the web browser by developing technical solutions to close the leaks. Current Javascript APIs are capable of leaking a lot of information as we browse the Internet, such as details of our browser that can be used to identify and track our online presence, and the content on the page (including any private customizations and the effects of extensions), and can monitor and leak our usage on the page such a mouse movements and interactions on the page. This problem is compounded by the increased use of the web browser as a platform for delivering software. While the community ignores the issue, solutions are being developed commercially and patented — we run the risk of ending up unable to have privacy because the solutions are patented. The proposed W3C PUA CG proposes to address the problem with technical solutions at the web browser, such as restricting the back channels available to Javascript, and also by proposing HTML extensions to mitigate lost functionality. Note, this work cannot address the privacy of information that we overtly share, and there are other current W3C initiatives working on this, such as DNT."

3 of 76 comments (clear)

  1. Re:An even better idea. by james_gnz · · Score: 4, Interesting

    The costs of patent litigation exceed their investment value in all industries except chemistry and pharmaceuticals.
    Bessen, James & Meurer, Michael J. (2008) Patent Failure. Princeton University Press.
    So it would make sense to abolish patents in all other areas.

    The economically optimal copyright length, assuming a single flat term, is slightly less than 15 years
    Pollock, Rufus (2009) Forever Minus a Day? Calculating Optimal Copyright Term.
    I think it might be better to have a shorter copyright term followed by a further copyleft term though.

  2. Just undo the browser mistakes by Skapare · · Score: 5, Insightful

    Browsers had a lot of bad things done in them over the years. These should just be removed. Start with the Referer (regardless of spelling) field. If the domain is different, don't transmit it. Of course this only scratches the surface. When the user visits another domain, launch a whole new browser in a separate process. Also, do not expose data to a page's client side code about things like navigation to other pages when they are done in different tabs or windows. And when returning the view back to a previously viewed page, just view the previous contents ... do NOT reload the page. The only time a page should be reloaded is when the user navigates to it via a link, or presses reload, or the client code for that page requests reloading only itself or a page in the same directory.

    Yeah, they can break a lot of functionality that dumb web developers came to depend on. But these are things that never should have been there to begin with.

    --
    now we need to go OSS in diesel cars
  3. Re:An even better idea. by flimflammer · · Score: 4, Insightful

    Who the hell cares who wrote the book at that point? Some people seriously don't think about the consequences of a no copyright no patent environment. If there was absolutely no copyright or patents, the moment someone low in the food chain comes up with something, he can't do anything with it without risking losing it forever. What the hell incentive does he have to anything with it? What the hell reason does anyone have to invest in R&D when someone can just jump in and take the final result and run with it? Do you think we as a people will seriously go "Well they came up with it first, so I'm going to buy their product" when the competitor is offering the same thing at a drastically lower price since they don't have the price of the past R&D to consider?

    Yes, patents are abused and the system is currently absurd. Yes, copyright is abused and the system is currently absurd. (90+ year terms? Come on now.) But removing the systems completely instead of making them better makes no goddamn sense.