News for hackers. Stuff that matters.
Re:TIL: You can access a user’s camera with just HTML by amalcon on Tuesday September 06, 2022 @01:15PM (#32740076)
I recognize that this kind of thing is useful to the developer, of course, and we've gotten a lot of neat things this way.

My worry is basically that the absent functionality is the best thing about the web as a user. Take the notification API: One of the nice things about web pages and apps is that they stop bothering me once I close them; not so if I accidentally permit notifications! Fortunately I can turn that whole feature off, but at first I found myself wondering who ever thought that would be a good idea.

Yes I picked an extreme example, and I don't actually mind some of these things. I wish there were a permission pop-up before playing sound at all. Also, WebGL does concern me, since heavy GPU usage can draw a lot of power. Things like gamepad support and spatial audio (if they are behind permission pop-ups) don't really bother me, though.

Re:TIL: You can access a user’s camera with just HTML by johnfn on Tuesday September 06, 2022 @01:18PM (#32740112)
I don't know, this seems like a good compromise to me. Some apps (calendar) would be absolutely crippled without them. For everything else, I've just never turned them on in the first place.

> I wish there were a permission pop-up before playing sound at all

The browser can't actually play sound unless 1) it's triggered as the result of a user action (such as a mouse click) or 2) if you've often listened to sound on that page in the past.

Re:TIL: You can access a user’s camera with just HTML by amalcon on Tuesday September 06, 2022 @01:29PM (#32740272)
My answer to this is that the calendar just does not need to be a web app. Weakening a primary advantage of everything else on the web just so that my calendar can be a web app seems like a poor trade-off.

Re: sound, "Triggered as the result of a user action" is not a high enough bar.

Re:TIL: You can access a user’s camera with just HTML by lcnPylGDnU4H9OF on Tuesday September 06, 2022 @01:50PM (#32740548)
> the calendar just does not need to be a web app

And the chat app, and the email app, and the social media app (other opinions about social media notwithstanding). I think each of these things have their own legitimate use for notifications.

I guess it's the point of "weakening a primary advantage". I don't see how it's weakened (or rather, I don't see how it's a problem) when the notifications are on a per site permission. Especially so when the notifications can be turned off completely per browser.

> Re: sound, "Triggered as the result of a user action" is not a high enough bar.

I'm with you on this. Although it took until this thread for me to realize that sound at all should be a permission.

Re:TIL: You can access a user’s camera with just HTML by account42 on Wednesday September 07, 2022 @05:03AM (#32748270)
The world would be better off if social media apps did not have notifications.
Re:TIL: You can access a user’s camera with just HTML by shadowgovt on Tuesday September 06, 2022 @02:05PM (#32740768)
Calendars are far more useful as web apps than other incarnations; you can open them anywhere and don't have to carry a specific artifact with you to do it.
Re:TIL: You can access a user’s camera with just HTML by dijit on Tuesday September 06, 2022 @02:40PM (#32741292)
a web view for caldav is just fine (and how I use outlook currently); but for notifications a proper program is definitely preferable.
Re:TIL: You can access a user’s camera with just HTML by nathants on Tuesday September 06, 2022 @03:18PM (#32741908)
the flashing/buzzing/squawking device in your pocket does this quite well.
Re:TIL: You can access a user’s camera with just HTML by account42 on Wednesday September 07, 2022 @05:00AM (#32748260)
> The browser can't actually play sound unless 1) it's triggered as the result of a user action (such as a mouse click) or 2) if you've often listened to sound on that page in the past.

The point is that a click should not give the website permission to play audio - that should be handled much explicitly and not just the user selecting text or some other interaction. Besides, last time I checked Firefox still let AudioContext play sound without any user interaction even though the <audio> element has more restrictions. Which is another problem: the HTML + JS spec is too bloated to properly secure things.

Re:TIL: You can access a user’s camera with just HTML by notatoad on Tuesday September 06, 2022 @01:33PM (#32740318)
this seems like a pretty silly criticism - you have a feature that is both gated behind a per-site permission prompt and that has an option to globally turn it off, and you're still grumpy that it exists?

if you don't like it turn it off. arguing that things shouldn't exist just because you choose not to use them is pretty selfish.

Re:TIL: You can access a user’s camera with just HTML by amalcon on Tuesday September 06, 2022 @01:47PM (#32740510)
I mean... it does exist now, and I don't advocate taking it out since people have probably come to rely on it for some reason. Defaults matter, though, and I suspect[0] that a minority want this default.

[0]- With only anecdotes supporting my suspicion; I haven't done a rigorous study.

Re:TIL: You can access a user’s camera with just HTML by lupire on Tuesday September 06, 2022 @03:37PM (#32742167)
It seems silly to ask for a release to be crippled just because a page does something obnoxious inside its own space. The solution to that is a URL allowlist or blocklist.