GET https://kbin.spritesserver.nl/m/privacyguides@lemmy.one/t/31795/Your-Tablet-s-Light-Sensor-Can-Spy-On-You

Response
200 OK
IP
216.73.216.1
Profiled on
Token
feece5

Security

Token

There is no security token.

Firewall

main Name
Security enabled
Stateless

Configuration

Key Value
provider security.user.provider.concrete.app_user_provider
context main
entry_point App\Security\KbinAuthenticator
user_checker App\Security\UserChecker
access_denied_handler (none)
access_denied_url (none)
authenticators 
[
  "two_factor"
  "remember_me"
  "App\Security\KbinAuthenticator"
  "App\Security\FacebookAuthenticator"
  "App\Security\GoogleAuthenticator"
  "App\Security\GithubAuthenticator"
  "App\Security\KeycloakAuthenticator"
]

Listeners

Listener Duration Response 
Symfony\Component\Security\Http\Firewall\ChannelListener {#723
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
  -logger: Monolog\Logger {#783 …}
  -httpPort: 80
  -httpsPort: 443
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\ContextListener {#706
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorage {#1017 …}
  -sessionKey: "_security_main"
  -logger: Monolog\Logger {#783 …}
  -userProviders: Symfony\Component\DependencyInjection\Argument\RewindableGenerator {#705 …}
  -dispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
  -registered: false
  -trustResolver: Scheb\TwoFactorBundle\Security\Authentication\AuthenticationTrustResolver {#780 …}
  -sessionTrackerEnabler: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage::enableUsageTracking(): void {#703 …}
}
 11.53 ms (none) 
Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener {#584
  -authenticatorManager: Symfony\Component\Security\Http\Authentication\AuthenticatorManager {#595 …}
}
 0.00 ms (none) 
Scheb\TwoFactorBundle\Security\Http\Firewall\TwoFactorAccessListener {#582
  -twoFactorFirewallConfig: Scheb\TwoFactorBundle\Security\TwoFactor\TwoFactorFirewallConfig {#842 …}
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -twoFactorAccessDecider: Scheb\TwoFactorBundle\Security\Authorization\TwoFactorAccessDecider {#581 …}
}
 0.09 ms (none) 
Symfony\Component\Security\Http\Firewall\AccessListener {#579
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -accessDecisionManager: Symfony\Component\Security\Core\Authorization\TraceableAccessDecisionManager {#937 …}
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\LogoutListener {#786
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -options: [
    "csrf_parameter" => "_csrf_token"
    "csrf_token_id" => "logout"
    "logout_path" => "app_logout"
  ]
  -httpUtils: Symfony\Component\Security\Http\HttpUtils {#841 …}
  -csrfTokenManager: Symfony\Component\Security\Csrf\CsrfTokenManager {#1015 …}
  -eventDispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
}
 0.00 ms (none)

Authenticators

No authenticators have been recorded. Check previous profiles on your authentication endpoint.

Access Decision

affirmative Strategy
# Voter class
1 
"Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter"
2 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
3 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
4 
"Symfony\Component\Security\Core\Authorization\Voter\ExpressionVoter"
5 
"App\Security\Voter\EntryCommentVoter"
6 
"App\Security\Voter\EntryVoter"
7 
"App\Security\Voter\MagazineVoter"
8 
"App\Security\Voter\MessageThreadVoter"
9 
"App\Security\Voter\MessageVoter"
10 
"App\Security\Voter\NotificationVoter"
11 
"App\Security\Voter\OAuth2UserConsentVoter"
12 
"App\Security\Voter\PostCommentVoter"
13 
"App\Security\Voter\PostVoter"
14 
"App\Security\Voter\UserVoter"

Access decision log

# Result Attributes Object
1 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
2 DENIED moderate 
App\Entity\Entry {#1833
  +user: Proxies\__CG__\App\Entity\User {#1896 …}
  +magazine: App\Entity\Magazine {#265
    +icon: null
    +name: "privacyguides@lemmy.one"
    +title: "privacyguides"
    +description: """
      *In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.*\n
      \n
      This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.\n
      \n
      ---\n
      \n
      You can subscribe to this community from any Kbin or Lemmy instance:\n
      \n
      - [Subscribe on Kbin.social](https://kbin.social/m/privacyguides@lemmy.one)\n
      - [Subscribe on Lemmy.one](https://lemmy.one/c/privacyguides)\n
      - [Subscribe on Lemmy.ml](https://lemmy.ml/c/privacyguides@lemmy.one)\n
      - [Subscribe on Beehaw.org](https://beehaw.org/c/privacyguides@lemmy.one)\n
      \n
      [Learn more…](https://lemmy.one/post/355)\n
      \n
      ---\n
      \n
      Check out our website at [privacyguides.org](https://www.privacyguides.org) before asking your questions here. We’ve tried answering the common questions and recommendations there!\n
      \n
      Want to get involved? The website is [open-source on GitHub](https://github.com/privacyguides/privacyguides.org), and your help would be appreciated!\n
      \n
      ---\n
      \n
      **This community is the “official” Privacy Guides community on Lemmy, which can be [verified here](https://www.reddit.com/r/PrivacyGuides/comments/13x7oe3/who_wants_to_try_out_lemmy_privacyguideslemmyone/). Other “Privacy Guides” communities on other Lemmy servers are not moderated by this team or associated with the website.**\n
      \n
      ---\n
      \n
      **Moderation Rules:**\n
      \n
      1. We prefer posting about open-source software whenever possible.\n
      2. This is not the place for self-promotion if you are not listed on privacyguides.org. If you want to be listed, [make a suggestion on our forum first](https://discuss.privacyguides.net/c/site-development/suggestions/6).\n
      3. No soliciting engagement: Don’t ask for upvotes, follows, etc.\n
      4. Surveys, Fundraising, and Petitions must be **pre**-approved by the mod team.\n
      5. Be civil, no violence, hate speech. Assume people here are posting in good faith.\n
      6. Don’t repost topics which have already been covered here.\n
      7. News posts must be related to privacy and security, and **your post title must match the article headline exactly.** Do not editorialize titles, you can post your opinions in the post body or a comment.\n
      8. Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.\n
      9. **No help vampires:** This is not a tech support subreddit, don’t abuse our community’s willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.\n
      10. No misinformation: Extraordinary claims must be matched with **evidence.**\n
      11. Do not post about VPNs or cryptocurrencies which are not listed on [privacyguides.org](https://www.privacyguides.org/en/tools/). See Rule 2 for info on adding new recommendations to the website.\n
      12. General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. **We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.**\n
      \n
      ---\n
      \n
      Additional Resources:\n
      \n
      - [EFF: Surveillance Self-Defense](https://ssd.eff.org/)\n
      - [Consumer Reports Security Planner](https://securityplanner.consumerreports.org/)\n
      - [Jonah Aragon](https://www.jonaharagon.com) ([YouTube](https://youtube.com/@jonaharagon))\n
      - [r/Privacy](https://www.reddit.com/r/Privacy)\n
      - [Big Ass Data Broker Opt-Out List](https://github.com/yaelwrites/Big-Ass-Data-Broker-Opt-Out-List)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 259
    +entryCommentCount: 2490
    +postCount: 5
    +postCommentCount: 29
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729537882 {#275
      date: 2024-10-21 21:11:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#253 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +posts: Doctrine\ORM\PersistentCollection {#154 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#216 …}
    +bans: Doctrine\ORM\PersistentCollection {#133 …}
    +reports: Doctrine\ORM\PersistentCollection {#119 …}
    +badges: Doctrine\ORM\PersistentCollection {#97 …}
    +logs: Doctrine\ORM\PersistentCollection {#87 …}
    +awards: Doctrine\ORM\PersistentCollection {#76 …}
    +categories: Doctrine\ORM\PersistentCollection {#63 …}
    -id: 39
    +apId: "privacyguides@lemmy.one"
    +apProfileId: "https://lemmy.one/c/privacyguides"
    +apPublicUrl: "https://lemmy.one/c/privacyguides"
    +apFollowersUrl: "https://lemmy.one/c/privacyguides/followers"
    +apInboxUrl: "https://lemmy.one/inbox"
    +apDomain: "lemmy.one"
    +apPreferredUsername: "privacyguides"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729576084 {#269
      date: 2024-10-22 07:48:04.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1696630878 {#271
      date: 2023-10-07 00:21:18.0 +02:00
    }
  }
  +image: Proxies\__CG__\App\Entity\Image {#1905 …}
  +domain: Proxies\__CG__\App\Entity\Domain {#1951 …}
  +slug: "Your-Tablet-s-Light-Sensor-Can-Spy-On-You"
  +title: "Your Tablet's Light Sensor Can Spy On You"
  +url: "https://spectrum.ieee.org/ambient-light-sensor-cybersecurity-risk"
  +body: """
    Quote from the article:\n
    \n
    > People are aware of selfie cameras on laptops and tablets and sometimes use physical blockers to cover them,” says Liu. “But for the ambient light sensor, people don’t even know that an app is using that data at all. And this sensor is always on. Liu notes that there are still no blanket restrictions for Android apps.\n
    \n
    Remark added by me:\n
    \n
    Here, it might interest readers to know that unlike Stock Android, GrapheneOS (GrapheneOS is an Android-based, open source, privacy and security-focused mobile operating system for selected Google Pixel smartphones) provides a sensors permission toggle for each app. According to their [website](https://grapheneos.org/features#network-permission-toggle):\n
    \n
    Sensors permission toggle: disallow access to all other sensors not covered by existing Android permissions (Camera, Microphone, Body Sensors, Activity Recognition) including an accelerometer, gyroscope, compass, barometer, thermometer and any other sensors present on a given device. When access is disabled, apps receive zeroed data when they check for sensor values and don’t receive events. GrapheneOS creates an easy to disable notification when apps try to access sensors blocked by the permission being denied. This makes the feature more usable since users can tell if the app is trying to access this functionality.\n
    \n
    To avoid breaking compatibility with Android apps, the added permission is enabled by default. When an app attempts to access sensors and receives zeroed data due to being denied, GrapheneOS creates a notification which can be easily disabled. The Sensors permission can be set to be disabled by default for user installed apps in Settings ➔ Privacy.\n
    \n
    In conclusion, allow me to emphasize another quote from the article:\n
    \n
    > “The acquisition time in minutes is too cumbersome to launch simple and general privacy attacks on a mass scale,” says Lukasz Olejnik, an independent security researcher and consultant who has previously highlighted the [security risks posed by ambient light sensors](https://blog.lukaszolejnik.com/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/). “However, I would not rule out the significance of targeted collections for tailored operations against chosen targets.” Liu agrees that the approach is too complicated for widespread attacks. And one saving grace is that it is unlikely to ever work on a smartphone, as the displays are simply too small. But Liu says their results demonstrate how seemingly harmless combinations of components in mobile devices can lead to surprising security risks.
    """
  +type: "link"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 1
  +favouriteCount: 24
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1727096005 {#1794
    date: 2024-09-23 14:53:25.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1931 …}
  +votes: Doctrine\ORM\PersistentCollection {#1957 …}
  +reports: Doctrine\ORM\PersistentCollection {#1970 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
  +badges: Doctrine\ORM\PersistentCollection {#2440 …}
  +children: []
  -id: 31795
  -titleTs: "'light':4 'sensor':5 'spi':7 'tablet':2"
  -bodyTs: "'/features#network-permission-toggle):':114 '/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/).':318 'acceleromet':138 'access':119,153,182,206,228 'accord':108 'acquisit':277 'activ':134 'ad':64,217 'agre':337 'allow':267 'alway':49 'ambient':28,313 'android':61,77,83,128,214 'android-bas':82 'anoth':271 'app':38,62,107,156,179,202,215,225,261 'approach':340 'articl':4,275 'attack':290,346 'attempt':226 'avoid':210 'awar':7 'baromet':141 'base':84 'blanket':58 'block':184 'blocker':19 'blog.lukaszolejnik.com':317 'blog.lukaszolejnik.com/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/).':316 'bodi':132 'break':211 'camera':10,130 'check':162 'chosen':334 'collect':329 'combin':378 'compass':140 'compat':212 'complic':343 'compon':380 'conclus':266 'consult':303 'cover':21,125 'creat':172,239 'cumbersom':283 'data':42,159,233 'default':222,257 'demonstr':374 'deni':189,237 'devic':151,383 'disabl':155,176,246,255 'disallow':118 'display':364 'due':234 'easi':174 'easili':245 'emphas':270 'enabl':220 'even':34 'event':170 'ever':357 'exist':127 'featur':193 'focus':91 'function':208 'general':288 'given':150 'googl':97 'grace':350 'grapheneo':78,79,171,238 'grapheneos.org':113 'grapheneos.org/features#network-permission-toggle):':112 'gyroscop':139 'harmless':377 'highlight':307 'howev':319 'includ':136 'independ':299 'instal':260 'interest':70 'know':35,73 'laptop':12 'launch':285 'lead':385 'light':29,314 'liu':24,51,336,370 'lukasz':296 'make':191 'mass':293 'microphon':131 'might':69 'minut':280 'mobil':92,382 'note':52 'notif':177,241 'olejnik':297 'one':348 'open':85 'oper':93,332 'peopl':5,31 'permiss':103,116,129,187,218,249 'physic':18 'pixel':98 'pose':311 'present':147 'previous':306 'privaci':87,264,289 'provid':100 'quot':1,272 'reader':71 'receiv':157,169,231 'recognit':135 'remark':63 'research':301 'restrict':59 'result':373 'risk':310,389 'rule':323 'save':349 'say':23,295,371 'scale':294 'secur':90,300,309,388 'security-focus':89 'seem':376 'select':96 'selfi':9 'sensor':30,47,102,115,123,133,146,164,183,229,248,315 'set':252,263 'signific':326 'simpl':286 'simpli':366 'sinc':196 'small':368 'smartphon':99,361 'sometim':16 'sourc':86 'still':56 'stock':76 'surpris':387 'system':94 'tablet':14 'tailor':331 'target':328,335 'tell':199 'thermomet':142 'time':278 'toggl':104,117 'tri':180,204 'unlik':75,355 'usabl':195 'use':17,40 'user':197,259 'valu':165 'websit':111 'widespread':345 'work':358 'would':321 'zero':158,232"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1705753177
  +visibility: "visible             "
  +apId: "https://lemmy.world/post/10921294"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705692677 {#2434
    date: 2024-01-19 20:31:17.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
3 DENIED edit 
App\Entity\Entry {#1833
  +user: Proxies\__CG__\App\Entity\User {#1896 …}
  +magazine: App\Entity\Magazine {#265
    +icon: null
    +name: "privacyguides@lemmy.one"
    +title: "privacyguides"
    +description: """
      *In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.*\n
      \n
      This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.\n
      \n
      ---\n
      \n
      You can subscribe to this community from any Kbin or Lemmy instance:\n
      \n
      - [Subscribe on Kbin.social](https://kbin.social/m/privacyguides@lemmy.one)\n
      - [Subscribe on Lemmy.one](https://lemmy.one/c/privacyguides)\n
      - [Subscribe on Lemmy.ml](https://lemmy.ml/c/privacyguides@lemmy.one)\n
      - [Subscribe on Beehaw.org](https://beehaw.org/c/privacyguides@lemmy.one)\n
      \n
      [Learn more…](https://lemmy.one/post/355)\n
      \n
      ---\n
      \n
      Check out our website at [privacyguides.org](https://www.privacyguides.org) before asking your questions here. We’ve tried answering the common questions and recommendations there!\n
      \n
      Want to get involved? The website is [open-source on GitHub](https://github.com/privacyguides/privacyguides.org), and your help would be appreciated!\n
      \n
      ---\n
      \n
      **This community is the “official” Privacy Guides community on Lemmy, which can be [verified here](https://www.reddit.com/r/PrivacyGuides/comments/13x7oe3/who_wants_to_try_out_lemmy_privacyguideslemmyone/). Other “Privacy Guides” communities on other Lemmy servers are not moderated by this team or associated with the website.**\n
      \n
      ---\n
      \n
      **Moderation Rules:**\n
      \n
      1. We prefer posting about open-source software whenever possible.\n
      2. This is not the place for self-promotion if you are not listed on privacyguides.org. If you want to be listed, [make a suggestion on our forum first](https://discuss.privacyguides.net/c/site-development/suggestions/6).\n
      3. No soliciting engagement: Don’t ask for upvotes, follows, etc.\n
      4. Surveys, Fundraising, and Petitions must be **pre**-approved by the mod team.\n
      5. Be civil, no violence, hate speech. Assume people here are posting in good faith.\n
      6. Don’t repost topics which have already been covered here.\n
      7. News posts must be related to privacy and security, and **your post title must match the article headline exactly.** Do not editorialize titles, you can post your opinions in the post body or a comment.\n
      8. Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.\n
      9. **No help vampires:** This is not a tech support subreddit, don’t abuse our community’s willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.\n
      10. No misinformation: Extraordinary claims must be matched with **evidence.**\n
      11. Do not post about VPNs or cryptocurrencies which are not listed on [privacyguides.org](https://www.privacyguides.org/en/tools/). See Rule 2 for info on adding new recommendations to the website.\n
      12. General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. **We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.**\n
      \n
      ---\n
      \n
      Additional Resources:\n
      \n
      - [EFF: Surveillance Self-Defense](https://ssd.eff.org/)\n
      - [Consumer Reports Security Planner](https://securityplanner.consumerreports.org/)\n
      - [Jonah Aragon](https://www.jonaharagon.com) ([YouTube](https://youtube.com/@jonaharagon))\n
      - [r/Privacy](https://www.reddit.com/r/Privacy)\n
      - [Big Ass Data Broker Opt-Out List](https://github.com/yaelwrites/Big-Ass-Data-Broker-Opt-Out-List)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 259
    +entryCommentCount: 2490
    +postCount: 5
    +postCommentCount: 29
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729537882 {#275
      date: 2024-10-21 21:11:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#253 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +posts: Doctrine\ORM\PersistentCollection {#154 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#216 …}
    +bans: Doctrine\ORM\PersistentCollection {#133 …}
    +reports: Doctrine\ORM\PersistentCollection {#119 …}
    +badges: Doctrine\ORM\PersistentCollection {#97 …}
    +logs: Doctrine\ORM\PersistentCollection {#87 …}
    +awards: Doctrine\ORM\PersistentCollection {#76 …}
    +categories: Doctrine\ORM\PersistentCollection {#63 …}
    -id: 39
    +apId: "privacyguides@lemmy.one"
    +apProfileId: "https://lemmy.one/c/privacyguides"
    +apPublicUrl: "https://lemmy.one/c/privacyguides"
    +apFollowersUrl: "https://lemmy.one/c/privacyguides/followers"
    +apInboxUrl: "https://lemmy.one/inbox"
    +apDomain: "lemmy.one"
    +apPreferredUsername: "privacyguides"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729576084 {#269
      date: 2024-10-22 07:48:04.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1696630878 {#271
      date: 2023-10-07 00:21:18.0 +02:00
    }
  }
  +image: Proxies\__CG__\App\Entity\Image {#1905 …}
  +domain: Proxies\__CG__\App\Entity\Domain {#1951 …}
  +slug: "Your-Tablet-s-Light-Sensor-Can-Spy-On-You"
  +title: "Your Tablet's Light Sensor Can Spy On You"
  +url: "https://spectrum.ieee.org/ambient-light-sensor-cybersecurity-risk"
  +body: """
    Quote from the article:\n
    \n
    > People are aware of selfie cameras on laptops and tablets and sometimes use physical blockers to cover them,” says Liu. “But for the ambient light sensor, people don’t even know that an app is using that data at all. And this sensor is always on. Liu notes that there are still no blanket restrictions for Android apps.\n
    \n
    Remark added by me:\n
    \n
    Here, it might interest readers to know that unlike Stock Android, GrapheneOS (GrapheneOS is an Android-based, open source, privacy and security-focused mobile operating system for selected Google Pixel smartphones) provides a sensors permission toggle for each app. According to their [website](https://grapheneos.org/features#network-permission-toggle):\n
    \n
    Sensors permission toggle: disallow access to all other sensors not covered by existing Android permissions (Camera, Microphone, Body Sensors, Activity Recognition) including an accelerometer, gyroscope, compass, barometer, thermometer and any other sensors present on a given device. When access is disabled, apps receive zeroed data when they check for sensor values and don’t receive events. GrapheneOS creates an easy to disable notification when apps try to access sensors blocked by the permission being denied. This makes the feature more usable since users can tell if the app is trying to access this functionality.\n
    \n
    To avoid breaking compatibility with Android apps, the added permission is enabled by default. When an app attempts to access sensors and receives zeroed data due to being denied, GrapheneOS creates a notification which can be easily disabled. The Sensors permission can be set to be disabled by default for user installed apps in Settings ➔ Privacy.\n
    \n
    In conclusion, allow me to emphasize another quote from the article:\n
    \n
    > “The acquisition time in minutes is too cumbersome to launch simple and general privacy attacks on a mass scale,” says Lukasz Olejnik, an independent security researcher and consultant who has previously highlighted the [security risks posed by ambient light sensors](https://blog.lukaszolejnik.com/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/). “However, I would not rule out the significance of targeted collections for tailored operations against chosen targets.” Liu agrees that the approach is too complicated for widespread attacks. And one saving grace is that it is unlikely to ever work on a smartphone, as the displays are simply too small. But Liu says their results demonstrate how seemingly harmless combinations of components in mobile devices can lead to surprising security risks.
    """
  +type: "link"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 1
  +favouriteCount: 24
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1727096005 {#1794
    date: 2024-09-23 14:53:25.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1931 …}
  +votes: Doctrine\ORM\PersistentCollection {#1957 …}
  +reports: Doctrine\ORM\PersistentCollection {#1970 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
  +badges: Doctrine\ORM\PersistentCollection {#2440 …}
  +children: []
  -id: 31795
  -titleTs: "'light':4 'sensor':5 'spi':7 'tablet':2"
  -bodyTs: "'/features#network-permission-toggle):':114 '/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/).':318 'acceleromet':138 'access':119,153,182,206,228 'accord':108 'acquisit':277 'activ':134 'ad':64,217 'agre':337 'allow':267 'alway':49 'ambient':28,313 'android':61,77,83,128,214 'android-bas':82 'anoth':271 'app':38,62,107,156,179,202,215,225,261 'approach':340 'articl':4,275 'attack':290,346 'attempt':226 'avoid':210 'awar':7 'baromet':141 'base':84 'blanket':58 'block':184 'blocker':19 'blog.lukaszolejnik.com':317 'blog.lukaszolejnik.com/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/).':316 'bodi':132 'break':211 'camera':10,130 'check':162 'chosen':334 'collect':329 'combin':378 'compass':140 'compat':212 'complic':343 'compon':380 'conclus':266 'consult':303 'cover':21,125 'creat':172,239 'cumbersom':283 'data':42,159,233 'default':222,257 'demonstr':374 'deni':189,237 'devic':151,383 'disabl':155,176,246,255 'disallow':118 'display':364 'due':234 'easi':174 'easili':245 'emphas':270 'enabl':220 'even':34 'event':170 'ever':357 'exist':127 'featur':193 'focus':91 'function':208 'general':288 'given':150 'googl':97 'grace':350 'grapheneo':78,79,171,238 'grapheneos.org':113 'grapheneos.org/features#network-permission-toggle):':112 'gyroscop':139 'harmless':377 'highlight':307 'howev':319 'includ':136 'independ':299 'instal':260 'interest':70 'know':35,73 'laptop':12 'launch':285 'lead':385 'light':29,314 'liu':24,51,336,370 'lukasz':296 'make':191 'mass':293 'microphon':131 'might':69 'minut':280 'mobil':92,382 'note':52 'notif':177,241 'olejnik':297 'one':348 'open':85 'oper':93,332 'peopl':5,31 'permiss':103,116,129,187,218,249 'physic':18 'pixel':98 'pose':311 'present':147 'previous':306 'privaci':87,264,289 'provid':100 'quot':1,272 'reader':71 'receiv':157,169,231 'recognit':135 'remark':63 'research':301 'restrict':59 'result':373 'risk':310,389 'rule':323 'save':349 'say':23,295,371 'scale':294 'secur':90,300,309,388 'security-focus':89 'seem':376 'select':96 'selfi':9 'sensor':30,47,102,115,123,133,146,164,183,229,248,315 'set':252,263 'signific':326 'simpl':286 'simpli':366 'sinc':196 'small':368 'smartphon':99,361 'sometim':16 'sourc':86 'still':56 'stock':76 'surpris':387 'system':94 'tablet':14 'tailor':331 'target':328,335 'tell':199 'thermomet':142 'time':278 'toggl':104,117 'tri':180,204 'unlik':75,355 'usabl':195 'use':17,40 'user':197,259 'valu':165 'websit':111 'widespread':345 'work':358 'would':321 'zero':158,232"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1705753177
  +visibility: "visible             "
  +apId: "https://lemmy.world/post/10921294"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705692677 {#2434
    date: 2024-01-19 20:31:17.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
4 DENIED moderate 
App\Entity\Entry {#1833
  +user: Proxies\__CG__\App\Entity\User {#1896 …}
  +magazine: App\Entity\Magazine {#265
    +icon: null
    +name: "privacyguides@lemmy.one"
    +title: "privacyguides"
    +description: """
      *In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.*\n
      \n
      This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.\n
      \n
      ---\n
      \n
      You can subscribe to this community from any Kbin or Lemmy instance:\n
      \n
      - [Subscribe on Kbin.social](https://kbin.social/m/privacyguides@lemmy.one)\n
      - [Subscribe on Lemmy.one](https://lemmy.one/c/privacyguides)\n
      - [Subscribe on Lemmy.ml](https://lemmy.ml/c/privacyguides@lemmy.one)\n
      - [Subscribe on Beehaw.org](https://beehaw.org/c/privacyguides@lemmy.one)\n
      \n
      [Learn more…](https://lemmy.one/post/355)\n
      \n
      ---\n
      \n
      Check out our website at [privacyguides.org](https://www.privacyguides.org) before asking your questions here. We’ve tried answering the common questions and recommendations there!\n
      \n
      Want to get involved? The website is [open-source on GitHub](https://github.com/privacyguides/privacyguides.org), and your help would be appreciated!\n
      \n
      ---\n
      \n
      **This community is the “official” Privacy Guides community on Lemmy, which can be [verified here](https://www.reddit.com/r/PrivacyGuides/comments/13x7oe3/who_wants_to_try_out_lemmy_privacyguideslemmyone/). Other “Privacy Guides” communities on other Lemmy servers are not moderated by this team or associated with the website.**\n
      \n
      ---\n
      \n
      **Moderation Rules:**\n
      \n
      1. We prefer posting about open-source software whenever possible.\n
      2. This is not the place for self-promotion if you are not listed on privacyguides.org. If you want to be listed, [make a suggestion on our forum first](https://discuss.privacyguides.net/c/site-development/suggestions/6).\n
      3. No soliciting engagement: Don’t ask for upvotes, follows, etc.\n
      4. Surveys, Fundraising, and Petitions must be **pre**-approved by the mod team.\n
      5. Be civil, no violence, hate speech. Assume people here are posting in good faith.\n
      6. Don’t repost topics which have already been covered here.\n
      7. News posts must be related to privacy and security, and **your post title must match the article headline exactly.** Do not editorialize titles, you can post your opinions in the post body or a comment.\n
      8. Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.\n
      9. **No help vampires:** This is not a tech support subreddit, don’t abuse our community’s willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.\n
      10. No misinformation: Extraordinary claims must be matched with **evidence.**\n
      11. Do not post about VPNs or cryptocurrencies which are not listed on [privacyguides.org](https://www.privacyguides.org/en/tools/). See Rule 2 for info on adding new recommendations to the website.\n
      12. General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. **We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.**\n
      \n
      ---\n
      \n
      Additional Resources:\n
      \n
      - [EFF: Surveillance Self-Defense](https://ssd.eff.org/)\n
      - [Consumer Reports Security Planner](https://securityplanner.consumerreports.org/)\n
      - [Jonah Aragon](https://www.jonaharagon.com) ([YouTube](https://youtube.com/@jonaharagon))\n
      - [r/Privacy](https://www.reddit.com/r/Privacy)\n
      - [Big Ass Data Broker Opt-Out List](https://github.com/yaelwrites/Big-Ass-Data-Broker-Opt-Out-List)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 259
    +entryCommentCount: 2490
    +postCount: 5
    +postCommentCount: 29
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729537882 {#275
      date: 2024-10-21 21:11:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#253 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +posts: Doctrine\ORM\PersistentCollection {#154 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#216 …}
    +bans: Doctrine\ORM\PersistentCollection {#133 …}
    +reports: Doctrine\ORM\PersistentCollection {#119 …}
    +badges: Doctrine\ORM\PersistentCollection {#97 …}
    +logs: Doctrine\ORM\PersistentCollection {#87 …}
    +awards: Doctrine\ORM\PersistentCollection {#76 …}
    +categories: Doctrine\ORM\PersistentCollection {#63 …}
    -id: 39
    +apId: "privacyguides@lemmy.one"
    +apProfileId: "https://lemmy.one/c/privacyguides"
    +apPublicUrl: "https://lemmy.one/c/privacyguides"
    +apFollowersUrl: "https://lemmy.one/c/privacyguides/followers"
    +apInboxUrl: "https://lemmy.one/inbox"
    +apDomain: "lemmy.one"
    +apPreferredUsername: "privacyguides"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729576084 {#269
      date: 2024-10-22 07:48:04.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1696630878 {#271
      date: 2023-10-07 00:21:18.0 +02:00
    }
  }
  +image: Proxies\__CG__\App\Entity\Image {#1905 …}
  +domain: Proxies\__CG__\App\Entity\Domain {#1951 …}
  +slug: "Your-Tablet-s-Light-Sensor-Can-Spy-On-You"
  +title: "Your Tablet's Light Sensor Can Spy On You"
  +url: "https://spectrum.ieee.org/ambient-light-sensor-cybersecurity-risk"
  +body: """
    Quote from the article:\n
    \n
    > People are aware of selfie cameras on laptops and tablets and sometimes use physical blockers to cover them,” says Liu. “But for the ambient light sensor, people don’t even know that an app is using that data at all. And this sensor is always on. Liu notes that there are still no blanket restrictions for Android apps.\n
    \n
    Remark added by me:\n
    \n
    Here, it might interest readers to know that unlike Stock Android, GrapheneOS (GrapheneOS is an Android-based, open source, privacy and security-focused mobile operating system for selected Google Pixel smartphones) provides a sensors permission toggle for each app. According to their [website](https://grapheneos.org/features#network-permission-toggle):\n
    \n
    Sensors permission toggle: disallow access to all other sensors not covered by existing Android permissions (Camera, Microphone, Body Sensors, Activity Recognition) including an accelerometer, gyroscope, compass, barometer, thermometer and any other sensors present on a given device. When access is disabled, apps receive zeroed data when they check for sensor values and don’t receive events. GrapheneOS creates an easy to disable notification when apps try to access sensors blocked by the permission being denied. This makes the feature more usable since users can tell if the app is trying to access this functionality.\n
    \n
    To avoid breaking compatibility with Android apps, the added permission is enabled by default. When an app attempts to access sensors and receives zeroed data due to being denied, GrapheneOS creates a notification which can be easily disabled. The Sensors permission can be set to be disabled by default for user installed apps in Settings ➔ Privacy.\n
    \n
    In conclusion, allow me to emphasize another quote from the article:\n
    \n
    > “The acquisition time in minutes is too cumbersome to launch simple and general privacy attacks on a mass scale,” says Lukasz Olejnik, an independent security researcher and consultant who has previously highlighted the [security risks posed by ambient light sensors](https://blog.lukaszolejnik.com/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/). “However, I would not rule out the significance of targeted collections for tailored operations against chosen targets.” Liu agrees that the approach is too complicated for widespread attacks. And one saving grace is that it is unlikely to ever work on a smartphone, as the displays are simply too small. But Liu says their results demonstrate how seemingly harmless combinations of components in mobile devices can lead to surprising security risks.
    """
  +type: "link"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 1
  +favouriteCount: 24
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1727096005 {#1794
    date: 2024-09-23 14:53:25.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1931 …}
  +votes: Doctrine\ORM\PersistentCollection {#1957 …}
  +reports: Doctrine\ORM\PersistentCollection {#1970 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
  +badges: Doctrine\ORM\PersistentCollection {#2440 …}
  +children: []
  -id: 31795
  -titleTs: "'light':4 'sensor':5 'spi':7 'tablet':2"
  -bodyTs: "'/features#network-permission-toggle):':114 '/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/).':318 'acceleromet':138 'access':119,153,182,206,228 'accord':108 'acquisit':277 'activ':134 'ad':64,217 'agre':337 'allow':267 'alway':49 'ambient':28,313 'android':61,77,83,128,214 'android-bas':82 'anoth':271 'app':38,62,107,156,179,202,215,225,261 'approach':340 'articl':4,275 'attack':290,346 'attempt':226 'avoid':210 'awar':7 'baromet':141 'base':84 'blanket':58 'block':184 'blocker':19 'blog.lukaszolejnik.com':317 'blog.lukaszolejnik.com/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/).':316 'bodi':132 'break':211 'camera':10,130 'check':162 'chosen':334 'collect':329 'combin':378 'compass':140 'compat':212 'complic':343 'compon':380 'conclus':266 'consult':303 'cover':21,125 'creat':172,239 'cumbersom':283 'data':42,159,233 'default':222,257 'demonstr':374 'deni':189,237 'devic':151,383 'disabl':155,176,246,255 'disallow':118 'display':364 'due':234 'easi':174 'easili':245 'emphas':270 'enabl':220 'even':34 'event':170 'ever':357 'exist':127 'featur':193 'focus':91 'function':208 'general':288 'given':150 'googl':97 'grace':350 'grapheneo':78,79,171,238 'grapheneos.org':113 'grapheneos.org/features#network-permission-toggle):':112 'gyroscop':139 'harmless':377 'highlight':307 'howev':319 'includ':136 'independ':299 'instal':260 'interest':70 'know':35,73 'laptop':12 'launch':285 'lead':385 'light':29,314 'liu':24,51,336,370 'lukasz':296 'make':191 'mass':293 'microphon':131 'might':69 'minut':280 'mobil':92,382 'note':52 'notif':177,241 'olejnik':297 'one':348 'open':85 'oper':93,332 'peopl':5,31 'permiss':103,116,129,187,218,249 'physic':18 'pixel':98 'pose':311 'present':147 'previous':306 'privaci':87,264,289 'provid':100 'quot':1,272 'reader':71 'receiv':157,169,231 'recognit':135 'remark':63 'research':301 'restrict':59 'result':373 'risk':310,389 'rule':323 'save':349 'say':23,295,371 'scale':294 'secur':90,300,309,388 'security-focus':89 'seem':376 'select':96 'selfi':9 'sensor':30,47,102,115,123,133,146,164,183,229,248,315 'set':252,263 'signific':326 'simpl':286 'simpli':366 'sinc':196 'small':368 'smartphon':99,361 'sometim':16 'sourc':86 'still':56 'stock':76 'surpris':387 'system':94 'tablet':14 'tailor':331 'target':328,335 'tell':199 'thermomet':142 'time':278 'toggl':104,117 'tri':180,204 'unlik':75,355 'usabl':195 'use':17,40 'user':197,259 'valu':165 'websit':111 'widespread':345 'work':358 'would':321 'zero':158,232"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1705753177
  +visibility: "visible             "
  +apId: "https://lemmy.world/post/10921294"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705692677 {#2434
    date: 2024-01-19 20:31:17.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
5 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
6 DENIED moderate 
App\Entity\Entry {#3808
  +user: Proxies\__CG__\App\Entity\User {#1896 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#3853 …}
  +image: Proxies\__CG__\App\Entity\Image {#1905 …}
  +domain: Proxies\__CG__\App\Entity\Domain {#1951 …}
  +slug: "Your-Tablet-s-Light-Sensor-Can-Spy-On-You"
  +title: "Your Tablet's Light Sensor Can Spy On You"
  +url: "https://spectrum.ieee.org/ambient-light-sensor-cybersecurity-risk"
  +body: """
    cross-posted from: [lemmy.world/post/10921294](https://lemmy.world/post/10921294)\n
    \n
    > Quote from the article:\n
    > \n
    > > People are aware of selfie cameras on laptops and tablets and sometimes use physical blockers to cover them,” says Liu. “But for the ambient light sensor, people don’t even know that an app is using that data at all. And this sensor is always on. Liu notes that there are still no blanket restrictions for Android apps.\n
    > \n
    > Remark added by me:\n
    > \n
    > Here, it might interest readers to know that unlike Stock Android, GrapheneOS (GrapheneOS is an Android-based, open source, privacy and security-focused mobile operating system for selected Google Pixel smartphones) provides a sensors permission toggle for each app. According to their [website](https://grapheneos.org/features#network-permission-toggle):\n
    > \n
    > Sensors permission toggle: disallow access to all other sensors not covered by existing Android permissions (Camera, Microphone, Body Sensors, Activity Recognition) including an accelerometer, gyroscope, compass, barometer, thermometer and any other sensors present on a given device. When access is disabled, apps receive zeroed data when they check for sensor values and don’t receive events. GrapheneOS creates an easy to disable notification when apps try to access sensors blocked by the permission being denied. This makes the feature more usable since users can tell if the app is trying to access this functionality.\n
    > \n
    > To avoid breaking compatibility with Android apps, the added permission is enabled by default. When an app attempts to access sensors and receives zeroed data due to being denied, GrapheneOS creates a notification which can be easily disabled. The Sensors permission can be set to be disabled by default for user installed apps in Settings ➔ Privacy.\n
    > \n
    > In conclusion, allow me to emphasize another quote from the article:\n
    > \n
    > > “The acquisition time in minutes is too cumbersome to launch simple and general privacy attacks on a mass scale,” says Lukasz Olejnik, an independent security researcher and consultant who has previously highlighted the [security risks posed by ambient light sensors](https://blog.lukaszolejnik.com/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/). “However, I would not rule out the significance of targeted collections for tailored operations against chosen targets.” Liu agrees that the approach is too complicated for widespread attacks. And one saving grace is that it is unlikely to ever work on a smartphone, as the displays are simply too small. But Liu says their results demonstrate how seemingly harmless combinations of components in mobile devices can lead to surprising security risks.
    """
  +type: "link"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 5
  +favouriteCount: 109
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1727065444 {#3801
    date: 2024-09-23 06:24:04.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#3859 …}
  +votes: Doctrine\ORM\PersistentCollection {#3871 …}
  +reports: Doctrine\ORM\PersistentCollection {#3797 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3799 …}
  +notifications: Doctrine\ORM\PersistentCollection {#3802 …}
  +badges: Doctrine\ORM\PersistentCollection {#3804 …}
  +children: []
  -id: 31797
  -titleTs: "'light':4 'sensor':5 'spi':7 'tablet':2"
  -bodyTs: "'/features#network-permission-toggle):':121 '/post/10921294](https://lemmy.world/post/10921294)':7 '/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/).':325 'acceleromet':145 'access':126,160,189,213,235 'accord':115 'acquisit':284 'activ':141 'ad':71,224 'agre':344 'allow':274 'alway':56 'ambient':35,320 'android':68,84,90,135,221 'android-bas':89 'anoth':278 'app':45,69,114,163,186,209,222,232,268 'approach':347 'articl':11,282 'attack':297,353 'attempt':233 'avoid':217 'awar':14 'baromet':148 'base':91 'blanket':65 'block':191 'blocker':26 'blog.lukaszolejnik.com':324 'blog.lukaszolejnik.com/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/).':323 'bodi':139 'break':218 'camera':17,137 'check':169 'chosen':341 'collect':336 'combin':385 'compass':147 'compat':219 'complic':350 'compon':387 'conclus':273 'consult':310 'cover':28,132 'creat':179,246 'cross':2 'cross-post':1 'cumbersom':290 'data':49,166,240 'default':229,264 'demonstr':381 'deni':196,244 'devic':158,390 'disabl':162,183,253,262 'disallow':125 'display':371 'due':241 'easi':181 'easili':252 'emphas':277 'enabl':227 'even':41 'event':177 'ever':364 'exist':134 'featur':200 'focus':98 'function':215 'general':295 'given':157 'googl':104 'grace':357 'grapheneo':85,86,178,245 'grapheneos.org':120 'grapheneos.org/features#network-permission-toggle):':119 'gyroscop':146 'harmless':384 'highlight':314 'howev':326 'includ':143 'independ':306 'instal':267 'interest':77 'know':42,80 'laptop':19 'launch':292 'lead':392 'lemmy.world':6 'lemmy.world/post/10921294](https://lemmy.world/post/10921294)':5 'light':36,321 'liu':31,58,343,377 'lukasz':303 'make':198 'mass':300 'microphon':138 'might':76 'minut':287 'mobil':99,389 'note':59 'notif':184,248 'olejnik':304 'one':355 'open':92 'oper':100,339 'peopl':12,38 'permiss':110,123,136,194,225,256 'physic':25 'pixel':105 'pose':318 'post':3 'present':154 'previous':313 'privaci':94,271,296 'provid':107 'quot':8,279 'reader':78 'receiv':164,176,238 'recognit':142 'remark':70 'research':308 'restrict':66 'result':380 'risk':317,396 'rule':330 'save':356 'say':30,302,378 'scale':301 'secur':97,307,316,395 'security-focus':96 'seem':383 'select':103 'selfi':16 'sensor':37,54,109,122,130,140,153,171,190,236,255,322 'set':259,270 'signific':333 'simpl':293 'simpli':373 'sinc':203 'small':375 'smartphon':106,368 'sometim':23 'sourc':93 'still':63 'stock':83 'surpris':394 'system':101 'tablet':21 'tailor':338 'target':335,342 'tell':206 'thermomet':149 'time':285 'toggl':111,124 'tri':187,211 'unlik':82,362 'usabl':202 'use':24,47 'user':204,266 'valu':172 'websit':118 'widespread':352 'work':365 'would':328 'zero':165,239"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1705779212
  +visibility: "visible             "
  +apId: "https://lemmy.world/post/10921310"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705692812 {#3793
    date: 2024-01-19 20:33:32.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
7 DENIED edit 
App\Entity\Entry {#3808
  +user: Proxies\__CG__\App\Entity\User {#1896 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#3853 …}
  +image: Proxies\__CG__\App\Entity\Image {#1905 …}
  +domain: Proxies\__CG__\App\Entity\Domain {#1951 …}
  +slug: "Your-Tablet-s-Light-Sensor-Can-Spy-On-You"
  +title: "Your Tablet's Light Sensor Can Spy On You"
  +url: "https://spectrum.ieee.org/ambient-light-sensor-cybersecurity-risk"
  +body: """
    cross-posted from: [lemmy.world/post/10921294](https://lemmy.world/post/10921294)\n
    \n
    > Quote from the article:\n
    > \n
    > > People are aware of selfie cameras on laptops and tablets and sometimes use physical blockers to cover them,” says Liu. “But for the ambient light sensor, people don’t even know that an app is using that data at all. And this sensor is always on. Liu notes that there are still no blanket restrictions for Android apps.\n
    > \n
    > Remark added by me:\n
    > \n
    > Here, it might interest readers to know that unlike Stock Android, GrapheneOS (GrapheneOS is an Android-based, open source, privacy and security-focused mobile operating system for selected Google Pixel smartphones) provides a sensors permission toggle for each app. According to their [website](https://grapheneos.org/features#network-permission-toggle):\n
    > \n
    > Sensors permission toggle: disallow access to all other sensors not covered by existing Android permissions (Camera, Microphone, Body Sensors, Activity Recognition) including an accelerometer, gyroscope, compass, barometer, thermometer and any other sensors present on a given device. When access is disabled, apps receive zeroed data when they check for sensor values and don’t receive events. GrapheneOS creates an easy to disable notification when apps try to access sensors blocked by the permission being denied. This makes the feature more usable since users can tell if the app is trying to access this functionality.\n
    > \n
    > To avoid breaking compatibility with Android apps, the added permission is enabled by default. When an app attempts to access sensors and receives zeroed data due to being denied, GrapheneOS creates a notification which can be easily disabled. The Sensors permission can be set to be disabled by default for user installed apps in Settings ➔ Privacy.\n
    > \n
    > In conclusion, allow me to emphasize another quote from the article:\n
    > \n
    > > “The acquisition time in minutes is too cumbersome to launch simple and general privacy attacks on a mass scale,” says Lukasz Olejnik, an independent security researcher and consultant who has previously highlighted the [security risks posed by ambient light sensors](https://blog.lukaszolejnik.com/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/). “However, I would not rule out the significance of targeted collections for tailored operations against chosen targets.” Liu agrees that the approach is too complicated for widespread attacks. And one saving grace is that it is unlikely to ever work on a smartphone, as the displays are simply too small. But Liu says their results demonstrate how seemingly harmless combinations of components in mobile devices can lead to surprising security risks.
    """
  +type: "link"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 5
  +favouriteCount: 109
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1727065444 {#3801
    date: 2024-09-23 06:24:04.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#3859 …}
  +votes: Doctrine\ORM\PersistentCollection {#3871 …}
  +reports: Doctrine\ORM\PersistentCollection {#3797 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3799 …}
  +notifications: Doctrine\ORM\PersistentCollection {#3802 …}
  +badges: Doctrine\ORM\PersistentCollection {#3804 …}
  +children: []
  -id: 31797
  -titleTs: "'light':4 'sensor':5 'spi':7 'tablet':2"
  -bodyTs: "'/features#network-permission-toggle):':121 '/post/10921294](https://lemmy.world/post/10921294)':7 '/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/).':325 'acceleromet':145 'access':126,160,189,213,235 'accord':115 'acquisit':284 'activ':141 'ad':71,224 'agre':344 'allow':274 'alway':56 'ambient':35,320 'android':68,84,90,135,221 'android-bas':89 'anoth':278 'app':45,69,114,163,186,209,222,232,268 'approach':347 'articl':11,282 'attack':297,353 'attempt':233 'avoid':217 'awar':14 'baromet':148 'base':91 'blanket':65 'block':191 'blocker':26 'blog.lukaszolejnik.com':324 'blog.lukaszolejnik.com/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/).':323 'bodi':139 'break':218 'camera':17,137 'check':169 'chosen':341 'collect':336 'combin':385 'compass':147 'compat':219 'complic':350 'compon':387 'conclus':273 'consult':310 'cover':28,132 'creat':179,246 'cross':2 'cross-post':1 'cumbersom':290 'data':49,166,240 'default':229,264 'demonstr':381 'deni':196,244 'devic':158,390 'disabl':162,183,253,262 'disallow':125 'display':371 'due':241 'easi':181 'easili':252 'emphas':277 'enabl':227 'even':41 'event':177 'ever':364 'exist':134 'featur':200 'focus':98 'function':215 'general':295 'given':157 'googl':104 'grace':357 'grapheneo':85,86,178,245 'grapheneos.org':120 'grapheneos.org/features#network-permission-toggle):':119 'gyroscop':146 'harmless':384 'highlight':314 'howev':326 'includ':143 'independ':306 'instal':267 'interest':77 'know':42,80 'laptop':19 'launch':292 'lead':392 'lemmy.world':6 'lemmy.world/post/10921294](https://lemmy.world/post/10921294)':5 'light':36,321 'liu':31,58,343,377 'lukasz':303 'make':198 'mass':300 'microphon':138 'might':76 'minut':287 'mobil':99,389 'note':59 'notif':184,248 'olejnik':304 'one':355 'open':92 'oper':100,339 'peopl':12,38 'permiss':110,123,136,194,225,256 'physic':25 'pixel':105 'pose':318 'post':3 'present':154 'previous':313 'privaci':94,271,296 'provid':107 'quot':8,279 'reader':78 'receiv':164,176,238 'recognit':142 'remark':70 'research':308 'restrict':66 'result':380 'risk':317,396 'rule':330 'save':356 'say':30,302,378 'scale':301 'secur':97,307,316,395 'security-focus':96 'seem':383 'select':103 'selfi':16 'sensor':37,54,109,122,130,140,153,171,190,236,255,322 'set':259,270 'signific':333 'simpl':293 'simpli':373 'sinc':203 'small':375 'smartphon':106,368 'sometim':23 'sourc':93 'still':63 'stock':83 'surpris':394 'system':101 'tablet':21 'tailor':338 'target':335,342 'tell':206 'thermomet':149 'time':285 'toggl':111,124 'tri':187,211 'unlik':82,362 'usabl':202 'use':24,47 'user':204,266 'valu':172 'websit':118 'widespread':352 'work':365 'would':328 'zero':165,239"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1705779212
  +visibility: "visible             "
  +apId: "https://lemmy.world/post/10921310"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705692812 {#3793
    date: 2024-01-19 20:33:32.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
8 DENIED moderate 
App\Entity\Entry {#3808
  +user: Proxies\__CG__\App\Entity\User {#1896 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#3853 …}
  +image: Proxies\__CG__\App\Entity\Image {#1905 …}
  +domain: Proxies\__CG__\App\Entity\Domain {#1951 …}
  +slug: "Your-Tablet-s-Light-Sensor-Can-Spy-On-You"
  +title: "Your Tablet's Light Sensor Can Spy On You"
  +url: "https://spectrum.ieee.org/ambient-light-sensor-cybersecurity-risk"
  +body: """
    cross-posted from: [lemmy.world/post/10921294](https://lemmy.world/post/10921294)\n
    \n
    > Quote from the article:\n
    > \n
    > > People are aware of selfie cameras on laptops and tablets and sometimes use physical blockers to cover them,” says Liu. “But for the ambient light sensor, people don’t even know that an app is using that data at all. And this sensor is always on. Liu notes that there are still no blanket restrictions for Android apps.\n
    > \n
    > Remark added by me:\n
    > \n
    > Here, it might interest readers to know that unlike Stock Android, GrapheneOS (GrapheneOS is an Android-based, open source, privacy and security-focused mobile operating system for selected Google Pixel smartphones) provides a sensors permission toggle for each app. According to their [website](https://grapheneos.org/features#network-permission-toggle):\n
    > \n
    > Sensors permission toggle: disallow access to all other sensors not covered by existing Android permissions (Camera, Microphone, Body Sensors, Activity Recognition) including an accelerometer, gyroscope, compass, barometer, thermometer and any other sensors present on a given device. When access is disabled, apps receive zeroed data when they check for sensor values and don’t receive events. GrapheneOS creates an easy to disable notification when apps try to access sensors blocked by the permission being denied. This makes the feature more usable since users can tell if the app is trying to access this functionality.\n
    > \n
    > To avoid breaking compatibility with Android apps, the added permission is enabled by default. When an app attempts to access sensors and receives zeroed data due to being denied, GrapheneOS creates a notification which can be easily disabled. The Sensors permission can be set to be disabled by default for user installed apps in Settings ➔ Privacy.\n
    > \n
    > In conclusion, allow me to emphasize another quote from the article:\n
    > \n
    > > “The acquisition time in minutes is too cumbersome to launch simple and general privacy attacks on a mass scale,” says Lukasz Olejnik, an independent security researcher and consultant who has previously highlighted the [security risks posed by ambient light sensors](https://blog.lukaszolejnik.com/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/). “However, I would not rule out the significance of targeted collections for tailored operations against chosen targets.” Liu agrees that the approach is too complicated for widespread attacks. And one saving grace is that it is unlikely to ever work on a smartphone, as the displays are simply too small. But Liu says their results demonstrate how seemingly harmless combinations of components in mobile devices can lead to surprising security risks.
    """
  +type: "link"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 5
  +favouriteCount: 109
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1727065444 {#3801
    date: 2024-09-23 06:24:04.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#3859 …}
  +votes: Doctrine\ORM\PersistentCollection {#3871 …}
  +reports: Doctrine\ORM\PersistentCollection {#3797 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3799 …}
  +notifications: Doctrine\ORM\PersistentCollection {#3802 …}
  +badges: Doctrine\ORM\PersistentCollection {#3804 …}
  +children: []
  -id: 31797
  -titleTs: "'light':4 'sensor':5 'spi':7 'tablet':2"
  -bodyTs: "'/features#network-permission-toggle):':121 '/post/10921294](https://lemmy.world/post/10921294)':7 '/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/).':325 'acceleromet':145 'access':126,160,189,213,235 'accord':115 'acquisit':284 'activ':141 'ad':71,224 'agre':344 'allow':274 'alway':56 'ambient':35,320 'android':68,84,90,135,221 'android-bas':89 'anoth':278 'app':45,69,114,163,186,209,222,232,268 'approach':347 'articl':11,282 'attack':297,353 'attempt':233 'avoid':217 'awar':14 'baromet':148 'base':91 'blanket':65 'block':191 'blocker':26 'blog.lukaszolejnik.com':324 'blog.lukaszolejnik.com/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/).':323 'bodi':139 'break':218 'camera':17,137 'check':169 'chosen':341 'collect':336 'combin':385 'compass':147 'compat':219 'complic':350 'compon':387 'conclus':273 'consult':310 'cover':28,132 'creat':179,246 'cross':2 'cross-post':1 'cumbersom':290 'data':49,166,240 'default':229,264 'demonstr':381 'deni':196,244 'devic':158,390 'disabl':162,183,253,262 'disallow':125 'display':371 'due':241 'easi':181 'easili':252 'emphas':277 'enabl':227 'even':41 'event':177 'ever':364 'exist':134 'featur':200 'focus':98 'function':215 'general':295 'given':157 'googl':104 'grace':357 'grapheneo':85,86,178,245 'grapheneos.org':120 'grapheneos.org/features#network-permission-toggle):':119 'gyroscop':146 'harmless':384 'highlight':314 'howev':326 'includ':143 'independ':306 'instal':267 'interest':77 'know':42,80 'laptop':19 'launch':292 'lead':392 'lemmy.world':6 'lemmy.world/post/10921294](https://lemmy.world/post/10921294)':5 'light':36,321 'liu':31,58,343,377 'lukasz':303 'make':198 'mass':300 'microphon':138 'might':76 'minut':287 'mobil':99,389 'note':59 'notif':184,248 'olejnik':304 'one':355 'open':92 'oper':100,339 'peopl':12,38 'permiss':110,123,136,194,225,256 'physic':25 'pixel':105 'pose':318 'post':3 'present':154 'previous':313 'privaci':94,271,296 'provid':107 'quot':8,279 'reader':78 'receiv':164,176,238 'recognit':142 'remark':70 'research':308 'restrict':66 'result':380 'risk':317,396 'rule':330 'save':356 'say':30,302,378 'scale':301 'secur':97,307,316,395 'security-focus':96 'seem':383 'select':103 'selfi':16 'sensor':37,54,109,122,130,140,153,171,190,236,255,322 'set':259,270 'signific':333 'simpl':293 'simpli':373 'sinc':203 'small':375 'smartphon':106,368 'sometim':23 'sourc':93 'still':63 'stock':83 'surpris':394 'system':101 'tablet':21 'tailor':338 'target':335,342 'tell':206 'thermomet':149 'time':285 'toggl':111,124 'tri':187,211 'unlik':82,362 'usabl':202 'use':24,47 'user':204,266 'valu':172 'websit':118 'widespread':352 'work':365 'would':328 'zero':165,239"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1705779212
  +visibility: "visible             "
  +apId: "https://lemmy.world/post/10921310"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705692812 {#3793
    date: 2024-01-19 20:33:32.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
9 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
10 DENIED moderate 
App\Entity\Entry {#3809
  +user: Proxies\__CG__\App\Entity\User {#3810 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#3853 …}
  +image: Proxies\__CG__\App\Entity\Image {#1905 …}
  +domain: Proxies\__CG__\App\Entity\Domain {#1951 …}
  +slug: "Your-Tablet-s-Light-Sensor-Can-Spy-On-You"
  +title: "Your Tablet's Light Sensor Can Spy On You"
  +url: "https://spectrum.ieee.org/ambient-light-sensor-cybersecurity-risk"
  +body: null
  +type: "link"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 0
  +favouriteCount: 17
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1705580209 {#3806
    date: 2024-01-18 13:16:49.0 +01:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#3811 …}
  +votes: Doctrine\ORM\PersistentCollection {#3813 …}
  +reports: Doctrine\ORM\PersistentCollection {#3815 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3817 …}
  +notifications: Doctrine\ORM\PersistentCollection {#3819 …}
  +badges: Doctrine\ORM\PersistentCollection {#3821 …}
  +children: []
  -id: 31472
  -titleTs: "'light':4 'sensor':5 'spi':7 'tablet':2"
  -bodyTs: null
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1705616209
  +visibility: "visible             "
  +apId: "https://lemmy.ml/post/10707141"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705580209 {#3807
    date: 2024-01-18 13:16:49.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
11 DENIED edit 
App\Entity\Entry {#3809
  +user: Proxies\__CG__\App\Entity\User {#3810 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#3853 …}
  +image: Proxies\__CG__\App\Entity\Image {#1905 …}
  +domain: Proxies\__CG__\App\Entity\Domain {#1951 …}
  +slug: "Your-Tablet-s-Light-Sensor-Can-Spy-On-You"
  +title: "Your Tablet's Light Sensor Can Spy On You"
  +url: "https://spectrum.ieee.org/ambient-light-sensor-cybersecurity-risk"
  +body: null
  +type: "link"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 0
  +favouriteCount: 17
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1705580209 {#3806
    date: 2024-01-18 13:16:49.0 +01:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#3811 …}
  +votes: Doctrine\ORM\PersistentCollection {#3813 …}
  +reports: Doctrine\ORM\PersistentCollection {#3815 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3817 …}
  +notifications: Doctrine\ORM\PersistentCollection {#3819 …}
  +badges: Doctrine\ORM\PersistentCollection {#3821 …}
  +children: []
  -id: 31472
  -titleTs: "'light':4 'sensor':5 'spi':7 'tablet':2"
  -bodyTs: null
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1705616209
  +visibility: "visible             "
  +apId: "https://lemmy.ml/post/10707141"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705580209 {#3807
    date: 2024-01-18 13:16:49.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
12 DENIED moderate 
App\Entity\Entry {#3809
  +user: Proxies\__CG__\App\Entity\User {#3810 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#3853 …}
  +image: Proxies\__CG__\App\Entity\Image {#1905 …}
  +domain: Proxies\__CG__\App\Entity\Domain {#1951 …}
  +slug: "Your-Tablet-s-Light-Sensor-Can-Spy-On-You"
  +title: "Your Tablet's Light Sensor Can Spy On You"
  +url: "https://spectrum.ieee.org/ambient-light-sensor-cybersecurity-risk"
  +body: null
  +type: "link"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 0
  +favouriteCount: 17
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1705580209 {#3806
    date: 2024-01-18 13:16:49.0 +01:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#3811 …}
  +votes: Doctrine\ORM\PersistentCollection {#3813 …}
  +reports: Doctrine\ORM\PersistentCollection {#3815 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3817 …}
  +notifications: Doctrine\ORM\PersistentCollection {#3819 …}
  +badges: Doctrine\ORM\PersistentCollection {#3821 …}
  +children: []
  -id: 31472
  -titleTs: "'light':4 'sensor':5 'spi':7 'tablet':2"
  -bodyTs: null
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1705616209
  +visibility: "visible             "
  +apId: "https://lemmy.ml/post/10707141"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705580209 {#3807
    date: 2024-01-18 13:16:49.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
13 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
14 DENIED moderate 
App\Entity\EntryComment {#5340
  +user: App\Entity\User {#5288 …}
  +entry: App\Entity\Entry {#1833
    +user: Proxies\__CG__\App\Entity\User {#1896 …}
    +magazine: App\Entity\Magazine {#265
      +icon: null
      +name: "privacyguides@lemmy.one"
      +title: "privacyguides"
      +description: """
        *In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.*\n
        \n
        This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.\n
        \n
        ---\n
        \n
        You can subscribe to this community from any Kbin or Lemmy instance:\n
        \n
        - [Subscribe on Kbin.social](https://kbin.social/m/privacyguides@lemmy.one)\n
        - [Subscribe on Lemmy.one](https://lemmy.one/c/privacyguides)\n
        - [Subscribe on Lemmy.ml](https://lemmy.ml/c/privacyguides@lemmy.one)\n
        - [Subscribe on Beehaw.org](https://beehaw.org/c/privacyguides@lemmy.one)\n
        \n
        [Learn more…](https://lemmy.one/post/355)\n
        \n
        ---\n
        \n
        Check out our website at [privacyguides.org](https://www.privacyguides.org) before asking your questions here. We’ve tried answering the common questions and recommendations there!\n
        \n
        Want to get involved? The website is [open-source on GitHub](https://github.com/privacyguides/privacyguides.org), and your help would be appreciated!\n
        \n
        ---\n
        \n
        **This community is the “official” Privacy Guides community on Lemmy, which can be [verified here](https://www.reddit.com/r/PrivacyGuides/comments/13x7oe3/who_wants_to_try_out_lemmy_privacyguideslemmyone/). Other “Privacy Guides” communities on other Lemmy servers are not moderated by this team or associated with the website.**\n
        \n
        ---\n
        \n
        **Moderation Rules:**\n
        \n
        1. We prefer posting about open-source software whenever possible.\n
        2. This is not the place for self-promotion if you are not listed on privacyguides.org. If you want to be listed, [make a suggestion on our forum first](https://discuss.privacyguides.net/c/site-development/suggestions/6).\n
        3. No soliciting engagement: Don’t ask for upvotes, follows, etc.\n
        4. Surveys, Fundraising, and Petitions must be **pre**-approved by the mod team.\n
        5. Be civil, no violence, hate speech. Assume people here are posting in good faith.\n
        6. Don’t repost topics which have already been covered here.\n
        7. News posts must be related to privacy and security, and **your post title must match the article headline exactly.** Do not editorialize titles, you can post your opinions in the post body or a comment.\n
        8. Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.\n
        9. **No help vampires:** This is not a tech support subreddit, don’t abuse our community’s willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.\n
        10. No misinformation: Extraordinary claims must be matched with **evidence.**\n
        11. Do not post about VPNs or cryptocurrencies which are not listed on [privacyguides.org](https://www.privacyguides.org/en/tools/). See Rule 2 for info on adding new recommendations to the website.\n
        12. General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. **We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.**\n
        \n
        ---\n
        \n
        Additional Resources:\n
        \n
        - [EFF: Surveillance Self-Defense](https://ssd.eff.org/)\n
        - [Consumer Reports Security Planner](https://securityplanner.consumerreports.org/)\n
        - [Jonah Aragon](https://www.jonaharagon.com) ([YouTube](https://youtube.com/@jonaharagon))\n
        - [r/Privacy](https://www.reddit.com/r/Privacy)\n
        - [Big Ass Data Broker Opt-Out List](https://github.com/yaelwrites/Big-Ass-Data-Broker-Opt-Out-List)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 259
      +entryCommentCount: 2490
      +postCount: 5
      +postCommentCount: 29
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729537882 {#275
        date: 2024-10-21 21:11:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#253 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +posts: Doctrine\ORM\PersistentCollection {#154 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#216 …}
      +bans: Doctrine\ORM\PersistentCollection {#133 …}
      +reports: Doctrine\ORM\PersistentCollection {#119 …}
      +badges: Doctrine\ORM\PersistentCollection {#97 …}
      +logs: Doctrine\ORM\PersistentCollection {#87 …}
      +awards: Doctrine\ORM\PersistentCollection {#76 …}
      +categories: Doctrine\ORM\PersistentCollection {#63 …}
      -id: 39
      +apId: "privacyguides@lemmy.one"
      +apProfileId: "https://lemmy.one/c/privacyguides"
      +apPublicUrl: "https://lemmy.one/c/privacyguides"
      +apFollowersUrl: "https://lemmy.one/c/privacyguides/followers"
      +apInboxUrl: "https://lemmy.one/inbox"
      +apDomain: "lemmy.one"
      +apPreferredUsername: "privacyguides"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729576084 {#269
        date: 2024-10-22 07:48:04.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1696630878 {#271
        date: 2023-10-07 00:21:18.0 +02:00
      }
    }
    +image: Proxies\__CG__\App\Entity\Image {#1905 …}
    +domain: Proxies\__CG__\App\Entity\Domain {#1951 …}
    +slug: "Your-Tablet-s-Light-Sensor-Can-Spy-On-You"
    +title: "Your Tablet's Light Sensor Can Spy On You"
    +url: "https://spectrum.ieee.org/ambient-light-sensor-cybersecurity-risk"
    +body: """
      Quote from the article:\n
      \n
      > People are aware of selfie cameras on laptops and tablets and sometimes use physical blockers to cover them,” says Liu. “But for the ambient light sensor, people don’t even know that an app is using that data at all. And this sensor is always on. Liu notes that there are still no blanket restrictions for Android apps.\n
      \n
      Remark added by me:\n
      \n
      Here, it might interest readers to know that unlike Stock Android, GrapheneOS (GrapheneOS is an Android-based, open source, privacy and security-focused mobile operating system for selected Google Pixel smartphones) provides a sensors permission toggle for each app. According to their [website](https://grapheneos.org/features#network-permission-toggle):\n
      \n
      Sensors permission toggle: disallow access to all other sensors not covered by existing Android permissions (Camera, Microphone, Body Sensors, Activity Recognition) including an accelerometer, gyroscope, compass, barometer, thermometer and any other sensors present on a given device. When access is disabled, apps receive zeroed data when they check for sensor values and don’t receive events. GrapheneOS creates an easy to disable notification when apps try to access sensors blocked by the permission being denied. This makes the feature more usable since users can tell if the app is trying to access this functionality.\n
      \n
      To avoid breaking compatibility with Android apps, the added permission is enabled by default. When an app attempts to access sensors and receives zeroed data due to being denied, GrapheneOS creates a notification which can be easily disabled. The Sensors permission can be set to be disabled by default for user installed apps in Settings ➔ Privacy.\n
      \n
      In conclusion, allow me to emphasize another quote from the article:\n
      \n
      > “The acquisition time in minutes is too cumbersome to launch simple and general privacy attacks on a mass scale,” says Lukasz Olejnik, an independent security researcher and consultant who has previously highlighted the [security risks posed by ambient light sensors](https://blog.lukaszolejnik.com/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/). “However, I would not rule out the significance of targeted collections for tailored operations against chosen targets.” Liu agrees that the approach is too complicated for widespread attacks. And one saving grace is that it is unlikely to ever work on a smartphone, as the displays are simply too small. But Liu says their results demonstrate how seemingly harmless combinations of components in mobile devices can lead to surprising security risks.
      """
    +type: "link"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 1
    +favouriteCount: 24
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1727096005 {#1794
      date: 2024-09-23 14:53:25.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1931 …}
    +votes: Doctrine\ORM\PersistentCollection {#1957 …}
    +reports: Doctrine\ORM\PersistentCollection {#1970 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
    +badges: Doctrine\ORM\PersistentCollection {#2440 …}
    +children: []
    -id: 31795
    -titleTs: "'light':4 'sensor':5 'spi':7 'tablet':2"
    -bodyTs: "'/features#network-permission-toggle):':114 '/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/).':318 'acceleromet':138 'access':119,153,182,206,228 'accord':108 'acquisit':277 'activ':134 'ad':64,217 'agre':337 'allow':267 'alway':49 'ambient':28,313 'android':61,77,83,128,214 'android-bas':82 'anoth':271 'app':38,62,107,156,179,202,215,225,261 'approach':340 'articl':4,275 'attack':290,346 'attempt':226 'avoid':210 'awar':7 'baromet':141 'base':84 'blanket':58 'block':184 'blocker':19 'blog.lukaszolejnik.com':317 'blog.lukaszolejnik.com/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/).':316 'bodi':132 'break':211 'camera':10,130 'check':162 'chosen':334 'collect':329 'combin':378 'compass':140 'compat':212 'complic':343 'compon':380 'conclus':266 'consult':303 'cover':21,125 'creat':172,239 'cumbersom':283 'data':42,159,233 'default':222,257 'demonstr':374 'deni':189,237 'devic':151,383 'disabl':155,176,246,255 'disallow':118 'display':364 'due':234 'easi':174 'easili':245 'emphas':270 'enabl':220 'even':34 'event':170 'ever':357 'exist':127 'featur':193 'focus':91 'function':208 'general':288 'given':150 'googl':97 'grace':350 'grapheneo':78,79,171,238 'grapheneos.org':113 'grapheneos.org/features#network-permission-toggle):':112 'gyroscop':139 'harmless':377 'highlight':307 'howev':319 'includ':136 'independ':299 'instal':260 'interest':70 'know':35,73 'laptop':12 'launch':285 'lead':385 'light':29,314 'liu':24,51,336,370 'lukasz':296 'make':191 'mass':293 'microphon':131 'might':69 'minut':280 'mobil':92,382 'note':52 'notif':177,241 'olejnik':297 'one':348 'open':85 'oper':93,332 'peopl':5,31 'permiss':103,116,129,187,218,249 'physic':18 'pixel':98 'pose':311 'present':147 'previous':306 'privaci':87,264,289 'provid':100 'quot':1,272 'reader':71 'receiv':157,169,231 'recognit':135 'remark':63 'research':301 'restrict':59 'result':373 'risk':310,389 'rule':323 'save':349 'say':23,295,371 'scale':294 'secur':90,300,309,388 'security-focus':89 'seem':376 'select':96 'selfi':9 'sensor':30,47,102,115,123,133,146,164,183,229,248,315 'set':252,263 'signific':326 'simpl':286 'simpli':366 'sinc':196 'small':368 'smartphon':99,361 'sometim':16 'sourc':86 'still':56 'stock':76 'surpris':387 'system':94 'tablet':14 'tailor':331 'target':328,335 'tell':199 'thermomet':142 'time':278 'toggl':104,117 'tri':180,204 'unlik':75,355 'usabl':195 'use':17,40 'user':197,259 'valu':165 'websit':111 'widespread':345 'work':358 'would':321 'zero':158,232"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705753177
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10921294"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705692677 {#2434
      date: 2024-01-19 20:31:17.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: "Of course it can. Man, technology just keeps getting better and better! /s"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705761004 {#5349
    date: 2024-01-20 15:30:04.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@ForgottenFlux@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5338 …}
  +nested: Doctrine\ORM\PersistentCollection {#5336 …}
  +votes: Doctrine\ORM\PersistentCollection {#5334 …}
  +reports: Doctrine\ORM\PersistentCollection {#5332 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5300 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5304 …}
  -id: 325715
  -bodyTs: "'/s':13 'better':10,12 'cours':2 'get':9 'keep':8 'man':5 'technolog':6"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sopuli.xyz/comment/6307155"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705761004 {#5285
    date: 2024-01-20 15:30:04.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
15 DENIED edit 
App\Entity\EntryComment {#5340
  +user: App\Entity\User {#5288 …}
  +entry: App\Entity\Entry {#1833
    +user: Proxies\__CG__\App\Entity\User {#1896 …}
    +magazine: App\Entity\Magazine {#265
      +icon: null
      +name: "privacyguides@lemmy.one"
      +title: "privacyguides"
      +description: """
        *In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.*\n
        \n
        This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.\n
        \n
        ---\n
        \n
        You can subscribe to this community from any Kbin or Lemmy instance:\n
        \n
        - [Subscribe on Kbin.social](https://kbin.social/m/privacyguides@lemmy.one)\n
        - [Subscribe on Lemmy.one](https://lemmy.one/c/privacyguides)\n
        - [Subscribe on Lemmy.ml](https://lemmy.ml/c/privacyguides@lemmy.one)\n
        - [Subscribe on Beehaw.org](https://beehaw.org/c/privacyguides@lemmy.one)\n
        \n
        [Learn more…](https://lemmy.one/post/355)\n
        \n
        ---\n
        \n
        Check out our website at [privacyguides.org](https://www.privacyguides.org) before asking your questions here. We’ve tried answering the common questions and recommendations there!\n
        \n
        Want to get involved? The website is [open-source on GitHub](https://github.com/privacyguides/privacyguides.org), and your help would be appreciated!\n
        \n
        ---\n
        \n
        **This community is the “official” Privacy Guides community on Lemmy, which can be [verified here](https://www.reddit.com/r/PrivacyGuides/comments/13x7oe3/who_wants_to_try_out_lemmy_privacyguideslemmyone/). Other “Privacy Guides” communities on other Lemmy servers are not moderated by this team or associated with the website.**\n
        \n
        ---\n
        \n
        **Moderation Rules:**\n
        \n
        1. We prefer posting about open-source software whenever possible.\n
        2. This is not the place for self-promotion if you are not listed on privacyguides.org. If you want to be listed, [make a suggestion on our forum first](https://discuss.privacyguides.net/c/site-development/suggestions/6).\n
        3. No soliciting engagement: Don’t ask for upvotes, follows, etc.\n
        4. Surveys, Fundraising, and Petitions must be **pre**-approved by the mod team.\n
        5. Be civil, no violence, hate speech. Assume people here are posting in good faith.\n
        6. Don’t repost topics which have already been covered here.\n
        7. News posts must be related to privacy and security, and **your post title must match the article headline exactly.** Do not editorialize titles, you can post your opinions in the post body or a comment.\n
        8. Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.\n
        9. **No help vampires:** This is not a tech support subreddit, don’t abuse our community’s willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.\n
        10. No misinformation: Extraordinary claims must be matched with **evidence.**\n
        11. Do not post about VPNs or cryptocurrencies which are not listed on [privacyguides.org](https://www.privacyguides.org/en/tools/). See Rule 2 for info on adding new recommendations to the website.\n
        12. General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. **We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.**\n
        \n
        ---\n
        \n
        Additional Resources:\n
        \n
        - [EFF: Surveillance Self-Defense](https://ssd.eff.org/)\n
        - [Consumer Reports Security Planner](https://securityplanner.consumerreports.org/)\n
        - [Jonah Aragon](https://www.jonaharagon.com) ([YouTube](https://youtube.com/@jonaharagon))\n
        - [r/Privacy](https://www.reddit.com/r/Privacy)\n
        - [Big Ass Data Broker Opt-Out List](https://github.com/yaelwrites/Big-Ass-Data-Broker-Opt-Out-List)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 259
      +entryCommentCount: 2490
      +postCount: 5
      +postCommentCount: 29
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729537882 {#275
        date: 2024-10-21 21:11:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#253 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +posts: Doctrine\ORM\PersistentCollection {#154 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#216 …}
      +bans: Doctrine\ORM\PersistentCollection {#133 …}
      +reports: Doctrine\ORM\PersistentCollection {#119 …}
      +badges: Doctrine\ORM\PersistentCollection {#97 …}
      +logs: Doctrine\ORM\PersistentCollection {#87 …}
      +awards: Doctrine\ORM\PersistentCollection {#76 …}
      +categories: Doctrine\ORM\PersistentCollection {#63 …}
      -id: 39
      +apId: "privacyguides@lemmy.one"
      +apProfileId: "https://lemmy.one/c/privacyguides"
      +apPublicUrl: "https://lemmy.one/c/privacyguides"
      +apFollowersUrl: "https://lemmy.one/c/privacyguides/followers"
      +apInboxUrl: "https://lemmy.one/inbox"
      +apDomain: "lemmy.one"
      +apPreferredUsername: "privacyguides"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729576084 {#269
        date: 2024-10-22 07:48:04.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1696630878 {#271
        date: 2023-10-07 00:21:18.0 +02:00
      }
    }
    +image: Proxies\__CG__\App\Entity\Image {#1905 …}
    +domain: Proxies\__CG__\App\Entity\Domain {#1951 …}
    +slug: "Your-Tablet-s-Light-Sensor-Can-Spy-On-You"
    +title: "Your Tablet's Light Sensor Can Spy On You"
    +url: "https://spectrum.ieee.org/ambient-light-sensor-cybersecurity-risk"
    +body: """
      Quote from the article:\n
      \n
      > People are aware of selfie cameras on laptops and tablets and sometimes use physical blockers to cover them,” says Liu. “But for the ambient light sensor, people don’t even know that an app is using that data at all. And this sensor is always on. Liu notes that there are still no blanket restrictions for Android apps.\n
      \n
      Remark added by me:\n
      \n
      Here, it might interest readers to know that unlike Stock Android, GrapheneOS (GrapheneOS is an Android-based, open source, privacy and security-focused mobile operating system for selected Google Pixel smartphones) provides a sensors permission toggle for each app. According to their [website](https://grapheneos.org/features#network-permission-toggle):\n
      \n
      Sensors permission toggle: disallow access to all other sensors not covered by existing Android permissions (Camera, Microphone, Body Sensors, Activity Recognition) including an accelerometer, gyroscope, compass, barometer, thermometer and any other sensors present on a given device. When access is disabled, apps receive zeroed data when they check for sensor values and don’t receive events. GrapheneOS creates an easy to disable notification when apps try to access sensors blocked by the permission being denied. This makes the feature more usable since users can tell if the app is trying to access this functionality.\n
      \n
      To avoid breaking compatibility with Android apps, the added permission is enabled by default. When an app attempts to access sensors and receives zeroed data due to being denied, GrapheneOS creates a notification which can be easily disabled. The Sensors permission can be set to be disabled by default for user installed apps in Settings ➔ Privacy.\n
      \n
      In conclusion, allow me to emphasize another quote from the article:\n
      \n
      > “The acquisition time in minutes is too cumbersome to launch simple and general privacy attacks on a mass scale,” says Lukasz Olejnik, an independent security researcher and consultant who has previously highlighted the [security risks posed by ambient light sensors](https://blog.lukaszolejnik.com/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/). “However, I would not rule out the significance of targeted collections for tailored operations against chosen targets.” Liu agrees that the approach is too complicated for widespread attacks. And one saving grace is that it is unlikely to ever work on a smartphone, as the displays are simply too small. But Liu says their results demonstrate how seemingly harmless combinations of components in mobile devices can lead to surprising security risks.
      """
    +type: "link"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 1
    +favouriteCount: 24
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1727096005 {#1794
      date: 2024-09-23 14:53:25.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1931 …}
    +votes: Doctrine\ORM\PersistentCollection {#1957 …}
    +reports: Doctrine\ORM\PersistentCollection {#1970 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
    +badges: Doctrine\ORM\PersistentCollection {#2440 …}
    +children: []
    -id: 31795
    -titleTs: "'light':4 'sensor':5 'spi':7 'tablet':2"
    -bodyTs: "'/features#network-permission-toggle):':114 '/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/).':318 'acceleromet':138 'access':119,153,182,206,228 'accord':108 'acquisit':277 'activ':134 'ad':64,217 'agre':337 'allow':267 'alway':49 'ambient':28,313 'android':61,77,83,128,214 'android-bas':82 'anoth':271 'app':38,62,107,156,179,202,215,225,261 'approach':340 'articl':4,275 'attack':290,346 'attempt':226 'avoid':210 'awar':7 'baromet':141 'base':84 'blanket':58 'block':184 'blocker':19 'blog.lukaszolejnik.com':317 'blog.lukaszolejnik.com/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/).':316 'bodi':132 'break':211 'camera':10,130 'check':162 'chosen':334 'collect':329 'combin':378 'compass':140 'compat':212 'complic':343 'compon':380 'conclus':266 'consult':303 'cover':21,125 'creat':172,239 'cumbersom':283 'data':42,159,233 'default':222,257 'demonstr':374 'deni':189,237 'devic':151,383 'disabl':155,176,246,255 'disallow':118 'display':364 'due':234 'easi':174 'easili':245 'emphas':270 'enabl':220 'even':34 'event':170 'ever':357 'exist':127 'featur':193 'focus':91 'function':208 'general':288 'given':150 'googl':97 'grace':350 'grapheneo':78,79,171,238 'grapheneos.org':113 'grapheneos.org/features#network-permission-toggle):':112 'gyroscop':139 'harmless':377 'highlight':307 'howev':319 'includ':136 'independ':299 'instal':260 'interest':70 'know':35,73 'laptop':12 'launch':285 'lead':385 'light':29,314 'liu':24,51,336,370 'lukasz':296 'make':191 'mass':293 'microphon':131 'might':69 'minut':280 'mobil':92,382 'note':52 'notif':177,241 'olejnik':297 'one':348 'open':85 'oper':93,332 'peopl':5,31 'permiss':103,116,129,187,218,249 'physic':18 'pixel':98 'pose':311 'present':147 'previous':306 'privaci':87,264,289 'provid':100 'quot':1,272 'reader':71 'receiv':157,169,231 'recognit':135 'remark':63 'research':301 'restrict':59 'result':373 'risk':310,389 'rule':323 'save':349 'say':23,295,371 'scale':294 'secur':90,300,309,388 'security-focus':89 'seem':376 'select':96 'selfi':9 'sensor':30,47,102,115,123,133,146,164,183,229,248,315 'set':252,263 'signific':326 'simpl':286 'simpli':366 'sinc':196 'small':368 'smartphon':99,361 'sometim':16 'sourc':86 'still':56 'stock':76 'surpris':387 'system':94 'tablet':14 'tailor':331 'target':328,335 'tell':199 'thermomet':142 'time':278 'toggl':104,117 'tri':180,204 'unlik':75,355 'usabl':195 'use':17,40 'user':197,259 'valu':165 'websit':111 'widespread':345 'work':358 'would':321 'zero':158,232"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705753177
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10921294"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705692677 {#2434
      date: 2024-01-19 20:31:17.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: "Of course it can. Man, technology just keeps getting better and better! /s"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705761004 {#5349
    date: 2024-01-20 15:30:04.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@ForgottenFlux@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5338 …}
  +nested: Doctrine\ORM\PersistentCollection {#5336 …}
  +votes: Doctrine\ORM\PersistentCollection {#5334 …}
  +reports: Doctrine\ORM\PersistentCollection {#5332 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5300 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5304 …}
  -id: 325715
  -bodyTs: "'/s':13 'better':10,12 'cours':2 'get':9 'keep':8 'man':5 'technolog':6"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sopuli.xyz/comment/6307155"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705761004 {#5285
    date: 2024-01-20 15:30:04.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
16 DENIED moderate 
App\Entity\EntryComment {#5340
  +user: App\Entity\User {#5288 …}
  +entry: App\Entity\Entry {#1833
    +user: Proxies\__CG__\App\Entity\User {#1896 …}
    +magazine: App\Entity\Magazine {#265
      +icon: null
      +name: "privacyguides@lemmy.one"
      +title: "privacyguides"
      +description: """
        *In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.*\n
        \n
        This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.\n
        \n
        ---\n
        \n
        You can subscribe to this community from any Kbin or Lemmy instance:\n
        \n
        - [Subscribe on Kbin.social](https://kbin.social/m/privacyguides@lemmy.one)\n
        - [Subscribe on Lemmy.one](https://lemmy.one/c/privacyguides)\n
        - [Subscribe on Lemmy.ml](https://lemmy.ml/c/privacyguides@lemmy.one)\n
        - [Subscribe on Beehaw.org](https://beehaw.org/c/privacyguides@lemmy.one)\n
        \n
        [Learn more…](https://lemmy.one/post/355)\n
        \n
        ---\n
        \n
        Check out our website at [privacyguides.org](https://www.privacyguides.org) before asking your questions here. We’ve tried answering the common questions and recommendations there!\n
        \n
        Want to get involved? The website is [open-source on GitHub](https://github.com/privacyguides/privacyguides.org), and your help would be appreciated!\n
        \n
        ---\n
        \n
        **This community is the “official” Privacy Guides community on Lemmy, which can be [verified here](https://www.reddit.com/r/PrivacyGuides/comments/13x7oe3/who_wants_to_try_out_lemmy_privacyguideslemmyone/). Other “Privacy Guides” communities on other Lemmy servers are not moderated by this team or associated with the website.**\n
        \n
        ---\n
        \n
        **Moderation Rules:**\n
        \n
        1. We prefer posting about open-source software whenever possible.\n
        2. This is not the place for self-promotion if you are not listed on privacyguides.org. If you want to be listed, [make a suggestion on our forum first](https://discuss.privacyguides.net/c/site-development/suggestions/6).\n
        3. No soliciting engagement: Don’t ask for upvotes, follows, etc.\n
        4. Surveys, Fundraising, and Petitions must be **pre**-approved by the mod team.\n
        5. Be civil, no violence, hate speech. Assume people here are posting in good faith.\n
        6. Don’t repost topics which have already been covered here.\n
        7. News posts must be related to privacy and security, and **your post title must match the article headline exactly.** Do not editorialize titles, you can post your opinions in the post body or a comment.\n
        8. Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.\n
        9. **No help vampires:** This is not a tech support subreddit, don’t abuse our community’s willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.\n
        10. No misinformation: Extraordinary claims must be matched with **evidence.**\n
        11. Do not post about VPNs or cryptocurrencies which are not listed on [privacyguides.org](https://www.privacyguides.org/en/tools/). See Rule 2 for info on adding new recommendations to the website.\n
        12. General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. **We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.**\n
        \n
        ---\n
        \n
        Additional Resources:\n
        \n
        - [EFF: Surveillance Self-Defense](https://ssd.eff.org/)\n
        - [Consumer Reports Security Planner](https://securityplanner.consumerreports.org/)\n
        - [Jonah Aragon](https://www.jonaharagon.com) ([YouTube](https://youtube.com/@jonaharagon))\n
        - [r/Privacy](https://www.reddit.com/r/Privacy)\n
        - [Big Ass Data Broker Opt-Out List](https://github.com/yaelwrites/Big-Ass-Data-Broker-Opt-Out-List)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 259
      +entryCommentCount: 2490
      +postCount: 5
      +postCommentCount: 29
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729537882 {#275
        date: 2024-10-21 21:11:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#253 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
      +entries: Doctrine\ORM\PersistentCollection {#196 …}
      +posts: Doctrine\ORM\PersistentCollection {#154 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#216 …}
      +bans: Doctrine\ORM\PersistentCollection {#133 …}
      +reports: Doctrine\ORM\PersistentCollection {#119 …}
      +badges: Doctrine\ORM\PersistentCollection {#97 …}
      +logs: Doctrine\ORM\PersistentCollection {#87 …}
      +awards: Doctrine\ORM\PersistentCollection {#76 …}
      +categories: Doctrine\ORM\PersistentCollection {#63 …}
      -id: 39
      +apId: "privacyguides@lemmy.one"
      +apProfileId: "https://lemmy.one/c/privacyguides"
      +apPublicUrl: "https://lemmy.one/c/privacyguides"
      +apFollowersUrl: "https://lemmy.one/c/privacyguides/followers"
      +apInboxUrl: "https://lemmy.one/inbox"
      +apDomain: "lemmy.one"
      +apPreferredUsername: "privacyguides"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729576084 {#269
        date: 2024-10-22 07:48:04.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1696630878 {#271
        date: 2023-10-07 00:21:18.0 +02:00
      }
    }
    +image: Proxies\__CG__\App\Entity\Image {#1905 …}
    +domain: Proxies\__CG__\App\Entity\Domain {#1951 …}
    +slug: "Your-Tablet-s-Light-Sensor-Can-Spy-On-You"
    +title: "Your Tablet's Light Sensor Can Spy On You"
    +url: "https://spectrum.ieee.org/ambient-light-sensor-cybersecurity-risk"
    +body: """
      Quote from the article:\n
      \n
      > People are aware of selfie cameras on laptops and tablets and sometimes use physical blockers to cover them,” says Liu. “But for the ambient light sensor, people don’t even know that an app is using that data at all. And this sensor is always on. Liu notes that there are still no blanket restrictions for Android apps.\n
      \n
      Remark added by me:\n
      \n
      Here, it might interest readers to know that unlike Stock Android, GrapheneOS (GrapheneOS is an Android-based, open source, privacy and security-focused mobile operating system for selected Google Pixel smartphones) provides a sensors permission toggle for each app. According to their [website](https://grapheneos.org/features#network-permission-toggle):\n
      \n
      Sensors permission toggle: disallow access to all other sensors not covered by existing Android permissions (Camera, Microphone, Body Sensors, Activity Recognition) including an accelerometer, gyroscope, compass, barometer, thermometer and any other sensors present on a given device. When access is disabled, apps receive zeroed data when they check for sensor values and don’t receive events. GrapheneOS creates an easy to disable notification when apps try to access sensors blocked by the permission being denied. This makes the feature more usable since users can tell if the app is trying to access this functionality.\n
      \n
      To avoid breaking compatibility with Android apps, the added permission is enabled by default. When an app attempts to access sensors and receives zeroed data due to being denied, GrapheneOS creates a notification which can be easily disabled. The Sensors permission can be set to be disabled by default for user installed apps in Settings ➔ Privacy.\n
      \n
      In conclusion, allow me to emphasize another quote from the article:\n
      \n
      > “The acquisition time in minutes is too cumbersome to launch simple and general privacy attacks on a mass scale,” says Lukasz Olejnik, an independent security researcher and consultant who has previously highlighted the [security risks posed by ambient light sensors](https://blog.lukaszolejnik.com/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/). “However, I would not rule out the significance of targeted collections for tailored operations against chosen targets.” Liu agrees that the approach is too complicated for widespread attacks. And one saving grace is that it is unlikely to ever work on a smartphone, as the displays are simply too small. But Liu says their results demonstrate how seemingly harmless combinations of components in mobile devices can lead to surprising security risks.
      """
    +type: "link"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 1
    +favouriteCount: 24
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1727096005 {#1794
      date: 2024-09-23 14:53:25.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1931 …}
    +votes: Doctrine\ORM\PersistentCollection {#1957 …}
    +reports: Doctrine\ORM\PersistentCollection {#1970 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
    +badges: Doctrine\ORM\PersistentCollection {#2440 …}
    +children: []
    -id: 31795
    -titleTs: "'light':4 'sensor':5 'spi':7 'tablet':2"
    -bodyTs: "'/features#network-permission-toggle):':114 '/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/).':318 'acceleromet':138 'access':119,153,182,206,228 'accord':108 'acquisit':277 'activ':134 'ad':64,217 'agre':337 'allow':267 'alway':49 'ambient':28,313 'android':61,77,83,128,214 'android-bas':82 'anoth':271 'app':38,62,107,156,179,202,215,225,261 'approach':340 'articl':4,275 'attack':290,346 'attempt':226 'avoid':210 'awar':7 'baromet':141 'base':84 'blanket':58 'block':184 'blocker':19 'blog.lukaszolejnik.com':317 'blog.lukaszolejnik.com/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/).':316 'bodi':132 'break':211 'camera':10,130 'check':162 'chosen':334 'collect':329 'combin':378 'compass':140 'compat':212 'complic':343 'compon':380 'conclus':266 'consult':303 'cover':21,125 'creat':172,239 'cumbersom':283 'data':42,159,233 'default':222,257 'demonstr':374 'deni':189,237 'devic':151,383 'disabl':155,176,246,255 'disallow':118 'display':364 'due':234 'easi':174 'easili':245 'emphas':270 'enabl':220 'even':34 'event':170 'ever':357 'exist':127 'featur':193 'focus':91 'function':208 'general':288 'given':150 'googl':97 'grace':350 'grapheneo':78,79,171,238 'grapheneos.org':113 'grapheneos.org/features#network-permission-toggle):':112 'gyroscop':139 'harmless':377 'highlight':307 'howev':319 'includ':136 'independ':299 'instal':260 'interest':70 'know':35,73 'laptop':12 'launch':285 'lead':385 'light':29,314 'liu':24,51,336,370 'lukasz':296 'make':191 'mass':293 'microphon':131 'might':69 'minut':280 'mobil':92,382 'note':52 'notif':177,241 'olejnik':297 'one':348 'open':85 'oper':93,332 'peopl':5,31 'permiss':103,116,129,187,218,249 'physic':18 'pixel':98 'pose':311 'present':147 'previous':306 'privaci':87,264,289 'provid':100 'quot':1,272 'reader':71 'receiv':157,169,231 'recognit':135 'remark':63 'research':301 'restrict':59 'result':373 'risk':310,389 'rule':323 'save':349 'say':23,295,371 'scale':294 'secur':90,300,309,388 'security-focus':89 'seem':376 'select':96 'selfi':9 'sensor':30,47,102,115,123,133,146,164,183,229,248,315 'set':252,263 'signific':326 'simpl':286 'simpli':366 'sinc':196 'small':368 'smartphon':99,361 'sometim':16 'sourc':86 'still':56 'stock':76 'surpris':387 'system':94 'tablet':14 'tailor':331 'target':328,335 'tell':199 'thermomet':142 'time':278 'toggl':104,117 'tri':180,204 'unlik':75,355 'usabl':195 'use':17,40 'user':197,259 'valu':165 'websit':111 'widespread':345 'work':358 'would':321 'zero':158,232"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1705753177
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/10921294"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705692677 {#2434
      date: 2024-01-19 20:31:17.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#265}
  +image: null
  +parent: null
  +root: null
  +body: "Of course it can. Man, technology just keeps getting better and better! /s"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1705761004 {#5349
    date: 2024-01-20 15:30:04.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@ForgottenFlux@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#5338 …}
  +nested: Doctrine\ORM\PersistentCollection {#5336 …}
  +votes: Doctrine\ORM\PersistentCollection {#5334 …}
  +reports: Doctrine\ORM\PersistentCollection {#5332 …}
  +favourites: Doctrine\ORM\PersistentCollection {#5300 …}
  +notifications: Doctrine\ORM\PersistentCollection {#5304 …}
  -id: 325715
  -bodyTs: "'/s':13 'better':10,12 'cours':2 'get':9 'keep':8 'man':5 'technolog':6"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sopuli.xyz/comment/6307155"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705761004 {#5285
    date: 2024-01-20 15:30:04.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
17 DENIED edit 
App\Entity\Magazine {#265
  +icon: null
  +name: "privacyguides@lemmy.one"
  +title: "privacyguides"
  +description: """
    *In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.*\n
    \n
    This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.\n
    \n
    ---\n
    \n
    You can subscribe to this community from any Kbin or Lemmy instance:\n
    \n
    - [Subscribe on Kbin.social](https://kbin.social/m/privacyguides@lemmy.one)\n
    - [Subscribe on Lemmy.one](https://lemmy.one/c/privacyguides)\n
    - [Subscribe on Lemmy.ml](https://lemmy.ml/c/privacyguides@lemmy.one)\n
    - [Subscribe on Beehaw.org](https://beehaw.org/c/privacyguides@lemmy.one)\n
    \n
    [Learn more…](https://lemmy.one/post/355)\n
    \n
    ---\n
    \n
    Check out our website at [privacyguides.org](https://www.privacyguides.org) before asking your questions here. We’ve tried answering the common questions and recommendations there!\n
    \n
    Want to get involved? The website is [open-source on GitHub](https://github.com/privacyguides/privacyguides.org), and your help would be appreciated!\n
    \n
    ---\n
    \n
    **This community is the “official” Privacy Guides community on Lemmy, which can be [verified here](https://www.reddit.com/r/PrivacyGuides/comments/13x7oe3/who_wants_to_try_out_lemmy_privacyguideslemmyone/). Other “Privacy Guides” communities on other Lemmy servers are not moderated by this team or associated with the website.**\n
    \n
    ---\n
    \n
    **Moderation Rules:**\n
    \n
    1. We prefer posting about open-source software whenever possible.\n
    2. This is not the place for self-promotion if you are not listed on privacyguides.org. If you want to be listed, [make a suggestion on our forum first](https://discuss.privacyguides.net/c/site-development/suggestions/6).\n
    3. No soliciting engagement: Don’t ask for upvotes, follows, etc.\n
    4. Surveys, Fundraising, and Petitions must be **pre**-approved by the mod team.\n
    5. Be civil, no violence, hate speech. Assume people here are posting in good faith.\n
    6. Don’t repost topics which have already been covered here.\n
    7. News posts must be related to privacy and security, and **your post title must match the article headline exactly.** Do not editorialize titles, you can post your opinions in the post body or a comment.\n
    8. Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.\n
    9. **No help vampires:** This is not a tech support subreddit, don’t abuse our community’s willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.\n
    10. No misinformation: Extraordinary claims must be matched with **evidence.**\n
    11. Do not post about VPNs or cryptocurrencies which are not listed on [privacyguides.org](https://www.privacyguides.org/en/tools/). See Rule 2 for info on adding new recommendations to the website.\n
    12. General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. **We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.**\n
    \n
    ---\n
    \n
    Additional Resources:\n
    \n
    - [EFF: Surveillance Self-Defense](https://ssd.eff.org/)\n
    - [Consumer Reports Security Planner](https://securityplanner.consumerreports.org/)\n
    - [Jonah Aragon](https://www.jonaharagon.com) ([YouTube](https://youtube.com/@jonaharagon))\n
    - [r/Privacy](https://www.reddit.com/r/Privacy)\n
    - [Big Ass Data Broker Opt-Out List](https://github.com/yaelwrites/Big-Ass-Data-Broker-Opt-Out-List)
    """
  +rules: null
  +subscriptionsCount: 1
  +entryCount: 259
  +entryCommentCount: 2490
  +postCount: 5
  +postCommentCount: 29
  +isAdult: false
  +customCss: null
  +lastActive: DateTime @1729537882 {#275
    date: 2024-10-21 21:11:22.0 +02:00
  }
  +markedForDeletionAt: null
  +tags: null
  +moderators: Doctrine\ORM\PersistentCollection {#253 …}
  +ownershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
  +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
  +entries: Doctrine\ORM\PersistentCollection {#196 …}
  +posts: Doctrine\ORM\PersistentCollection {#154 …}
  +subscriptions: Doctrine\ORM\PersistentCollection {#216 …}
  +bans: Doctrine\ORM\PersistentCollection {#133 …}
  +reports: Doctrine\ORM\PersistentCollection {#119 …}
  +badges: Doctrine\ORM\PersistentCollection {#97 …}
  +logs: Doctrine\ORM\PersistentCollection {#87 …}
  +awards: Doctrine\ORM\PersistentCollection {#76 …}
  +categories: Doctrine\ORM\PersistentCollection {#63 …}
  -id: 39
  +apId: "privacyguides@lemmy.one"
  +apProfileId: "https://lemmy.one/c/privacyguides"
  +apPublicUrl: "https://lemmy.one/c/privacyguides"
  +apFollowersUrl: "https://lemmy.one/c/privacyguides/followers"
  +apInboxUrl: "https://lemmy.one/inbox"
  +apDomain: "lemmy.one"
  +apPreferredUsername: "privacyguides"
  +apDiscoverable: true
  +apManuallyApprovesFollowers: null
  +privateKey: null
  +publicKey: null
  +apFetchedAt: DateTime @1729576084 {#269
    date: 2024-10-22 07:48:04.0 +02:00
  }
  +apDeletedAt: null
  +apTimeoutAt: null
  +visibility: "visible             "
  +createdAt: DateTimeImmutable @1696630878 {#271
    date: 2023-10-07 00:21:18.0 +02:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS DENIED 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details