Confirmed users
717
edits
WebAPI/Security/Bluetooth: Difference between revisions
Jump to navigation
Jump to search
no edit summary
No edit summary |
No edit summary |
||
| Line 10: | Line 10: | ||
Inherent threats: Privacy, access to sensitive user devices, de-anonimization based on bluetooth state | Inherent threats: Privacy, access to sensitive user devices, de-anonimization based on bluetooth state | ||
Threat severity: | Threat severity: High | ||
== Regular web content (unauthenticated) == | == Regular web content (unauthenticated) == | ||
| Line 21: | Line 21: | ||
Potential mitigations: | Potential mitigations: | ||
== | == Privileged (approved by app store) == | ||
Use cases: None | Use cases: None | ||
| Line 28: | Line 28: | ||
Potential mitigations: | Potential mitigations: | ||
== Certified ( | == Certified (system-critical apps) == | ||
Use cases: | Use cases: | ||
*Read bluetooth adapter state | *Read bluetooth adapter state | ||