logoalt Hacker News

drdexebtjltoday at 1:13 PM2 repliesview on HN

>Obviously apps can tell if they haven't been granted a permission

By design. This doesn’t need to be the case. It should be impossible to tell you have denied a permission.

In TFA’s case, the browser could just keep processing audio but never hook it up to a real audio sink.


Replies

victorbjorklundtoday at 1:39 PM

Soundd like a nightmare to build legitimate apps if you for example are building an app that uses the camera but you can’t in anyway tell that using the camera fails (because user had denied the permission 6 months ago and has no memory of it) and instead of being able to give a helpful error you are just ending up with I am guessing fake images (maybe just a black screen).

show 2 replies
ajrosstoday at 1:33 PM

That does nothing but start an arms race. Fine, audio "works" but do you get noise? Can you read back the sounds you play? No, right? It doesn't work, QED. Now the platform needs to fake the noise.

Likewise for any other hardware access you want, and most of them are harder. How do you fake local storage without storing anything? How do you fake Bluetooth access without virtualizing an entire device? Do you fake the screen dimensions to look like something else? Input latency? Where does it stop?

No, "does this work" is among the easiest questions to answer in technology. We aren't going to win this war.

show 2 replies