w3cping/privacy-threat-model

Issues

• supercookies

  #45 opened a year ago by npdoty
  1

• header enrichment

  #44 opened a year ago by npdoty
  1

• privacy -threat-model

  #43 opened 2 years ago by yanshin1499
  0

• Define a granularity at which location data is not sensitive

  #42 opened 3 years ago by jyasskin
  2

• Address cross-device correlation

  #40 opened 4 years ago by jyasskin
  1

• Add a section to discuss techniques to quantify privacy

  #35 opened 5 years ago by bslassey
  1

• Discuss exposing the GPU model and driver

  #28 opened 5 years ago by jyasskin
  2

• Discussion of high level threats should include clearer normative statements

  #37 opened 5 years ago by jyasskin
  1

• Confusing intro sentence

  #29 opened 5 years ago by samuelweiler
  0

• Add more states to threat model for goals we haven't blocked yet

  #38 opened 5 years ago by jyasskin
  1

• Consider how companies can pledge not to circumvent the threat model

  #39 opened 5 years ago by jyasskin
  0

• Add "manipulation" to the high-level threats

  #18 opened 5 years ago by jyasskin
  1

• Describe the threat of sites infringing on people's autonomy.

  #36 opened 5 years ago by jyasskin
  0

• Sensitive information disclosure and vulnerable communities

  #34 opened 5 years ago by hober
  1

• Add simultaneous event firing as a cross-site tracking vector

  #11 opened 5 years ago by jyasskin
  1

• Surveillance: distinguish between positive and negative connotations

  #23 opened 5 years ago by JoGSal
  3

• Sensitive-information: Add inferred restricted sensitive information

  #27 opened 5 years ago by JoGSal
  1

• Unwanted same-site recognition: should beacons be listed here too?

  #24 opened 5 years ago by JoGSal
  2

• belonging to a minority ethnicity: change to belonging to an ethnic minority

  #25 opened 5 years ago by JoGSal
  2

• Add "harassment and abuse" to high-level threats

  #20 opened 5 years ago by npdoty
  2

• Review privacy literature for high-level threats

  #21 opened 5 years ago by npdoty
  0

• Sensitive info: describe local attackers, confused users, and mitigations

  #19 opened 5 years ago by jyasskin
  0

• Define benign vs. sensitive information disclosure more formally

  #16 opened 5 years ago by tobie
  5

• Feedback from WoT Security TF

  #17 opened 5 years ago by mmccool
  0

• Any reason why user ID is defined as a integer and global identifier as a string?

  #15 opened 5 years ago by tobie
  1

• Attacker Capabilities: Read/Write storage

  #14 opened 5 years ago by jumde
  0

• Discuss the privacy of monitoring

  #9 opened 5 years ago by jyasskin
  15

• Definition of site doesn't include the scheme

  #2 opened 5 years ago by davidben
  0

• Correlate a visit from the same user over time

  #1 opened 5 years ago by martinthomson
  1