Hacker Newsnew | past | comments | ask | show | jobs | submit | grimli333's commentslogin

Well, presumably there may be valid use cases for WebGL applications or games behaving differently according to specific vendors/drivers.

It feels like something that needs to be asked permission for, however, so it can’t be used for nefarious purposes.


...I don't know. I realize this is an entirely subjective view of what a web page should be, but I just don't think any website should know the intricacies of my hardware. The web is a low-friction, low-trust environment; installing a desktop app has more friction, but it also acts as a signal of greater trust.

If a website ever really needs to know my hardware, it can ask me to choose from a drop-down. A lot of users won't know what hardware they have—but, those users are also unlikely to understand the implications of a hardware-detection permission prompt.


I mean, it's the usual duality. If a browser is for browsing documents, then of course you don't need that. And if a browser is a method for running arbitrary applications pseudo-safely, then it absolutely should be doing that.


The web APIs seem to be filled with features that in theory could be useful but you would have to do some serious hunting to find a legitimate user while you are flooded with examples of evil uses.

Firefox removed the battery API for this. In theory you could do something like show a stripped down site for low power users or something but it was only ever used for tracking.

While browsers have been used for a lot now, gaming seems like the one place we have seen virtually no use outside of random 2D games. I doubt there is a single web game that actually makes useful use of the gpu vendor details.


The problem with limiting browser features is that it makes web apps less competitive with apps on propertiary platforms. I agree not all websites should have access to battery API, but the user should decide on that, not a browser vendor. The same goes for all other limitations imposed.


I think the sane argument here is for sensible defaults. Leaving all those switches turned on is just opening the door for adtech. The set of information that's made available out of the box should be small, and if you need to access information about my graphics card, you can ask for it.


I think this only works if the average consumer can assess what is being asked for, though. “Do you want to let this website know what hardware you have?” is not a simple question.

“What is hardware?”

“Should I let a game know my hardware? Should I let a news website know my hardware?”


It is a discussion how to do it right. And surely, if propertiary platforms can do it, browsers can do it too. Especially propertiary platform app has permission to the system data enabled on default. Browser asking for it, would make web apps safer than native ones


If one does not understand what they are being asked to consent to, they are incapable of giving informed consent.


There’s also a Knight Rider Lab in the Atlantic Ocean. Michael Knight is so cool his secret base has a McDonald’s. I wonder how KITT gets there though.


Yes, this is true. However, it is public information and the site has a disclaimer indicating this. There is an alternate route to register to vote if your information is confidential. It’s trivial to learn this information in other ways as well. It’s somewhat notable how easy it was for me to look up a prominent politicians registration info, but that is simply not news. This post was flagged appropriately.


It took me five minutes to verify this information about Oregon is not factual. You can see someone’s address with name and date of birth, but the site makes it clear if you register with this system that info will not be confidential. You cannot register or change address without an Oregon DMV number. I have not verified additional states. EDIT: To clarify, I only mention registration and change of address because these are the only features I can find that resemble the report in any way. There is no way to request a replacement. You can very very easily test this yourself.


This is not about registration, it is the replacement feature that can cause a ballot that has not yet been successfully validated to be invalidated.


> the replacement feature

does not exist (in Oregon at least)


It does not. Also, you can’t even update registration info without an Oregon DMV number. At that point you’re straight up committing identity theft. Even if you could it does not invalidate an already submitted ballot. This is not correct information you are spreading.


I don’t understand. Why would these states allow you to invalidate a ballot online? What’s the legitimate use case for that feature?


They don't have a "cancel ballot" button. When you fill out and print the new online ballot it will cancel any previously sent ballots. They site says "Caution: If you continue, a ballot previously mailed to you will be canceled"


They don't.


Wow. This post was dangerous disinformation. I have independently confirmed this is false and ballots cannot be canceled or changed.

It is indeed possible to see addresses where ballots were mailed, and I was able to view a politician’s information using only their name and date of birth gleaned from Wikipedia.

I’m sure this information can be found in any number of ways, however. There is also a disclaimer stating “ If your information is confidential or you are not yet 18 years old, contact your county elections official to confirm your registration status.” which indicates using that site to register has no implication of privacy.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: