GET https://kbin.spritesserver.nl/index.php/m/privacy@lemmy.ml/t/31472/Your-Tablet-s-Light-Sensor-Can-Spy-On-You/oldest

Response
200 OK
IP
216.73.216.97
Profiled on
Token
ab01a1

Security

Token

There is no security token.

Firewall

main Name
Security enabled
Stateless

Configuration

Key Value
provider security.user.provider.concrete.app_user_provider
context main
entry_point App\Security\KbinAuthenticator
user_checker App\Security\UserChecker
access_denied_handler (none)
access_denied_url (none)
authenticators 
[
  "two_factor"
  "remember_me"
  "App\Security\KbinAuthenticator"
  "App\Security\FacebookAuthenticator"
  "App\Security\GoogleAuthenticator"
  "App\Security\GithubAuthenticator"
  "App\Security\KeycloakAuthenticator"
]

Listeners

Listener Duration Response 
Symfony\Component\Security\Http\Firewall\ChannelListener {#723
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
  -logger: Monolog\Logger {#783 …}
  -httpPort: 80
  -httpsPort: 443
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\ContextListener {#706
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorage {#1017 …}
  -sessionKey: "_security_main"
  -logger: Monolog\Logger {#783 …}
  -userProviders: Symfony\Component\DependencyInjection\Argument\RewindableGenerator {#705 …}
  -dispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
  -registered: false
  -trustResolver: Scheb\TwoFactorBundle\Security\Authentication\AuthenticationTrustResolver {#780 …}
  -sessionTrackerEnabler: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage::enableUsageTracking(): void {#703 …}
}
 56.88 ms (none) 
Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener {#584
  -authenticatorManager: Symfony\Component\Security\Http\Authentication\AuthenticatorManager {#595 …}
}
 0.00 ms (none) 
Scheb\TwoFactorBundle\Security\Http\Firewall\TwoFactorAccessListener {#582
  -twoFactorFirewallConfig: Scheb\TwoFactorBundle\Security\TwoFactor\TwoFactorFirewallConfig {#842 …}
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -twoFactorAccessDecider: Scheb\TwoFactorBundle\Security\Authorization\TwoFactorAccessDecider {#581 …}
}
 0.07 ms (none) 
Symfony\Component\Security\Http\Firewall\AccessListener {#579
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -accessDecisionManager: Symfony\Component\Security\Core\Authorization\TraceableAccessDecisionManager {#937 …}
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\LogoutListener {#786
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -options: [
    "csrf_parameter" => "_csrf_token"
    "csrf_token_id" => "logout"
    "logout_path" => "app_logout"
  ]
  -httpUtils: Symfony\Component\Security\Http\HttpUtils {#841 …}
  -csrfTokenManager: Symfony\Component\Security\Csrf\CsrfTokenManager {#1015 …}
  -eventDispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
}
 0.00 ms (none)

Authenticators

No authenticators have been recorded. Check previous profiles on your authentication endpoint.

Access Decision

affirmative Strategy
# Voter class
1 
"Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter"
2 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
3 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
4 
"Symfony\Component\Security\Core\Authorization\Voter\ExpressionVoter"
5 
"App\Security\Voter\EntryCommentVoter"
6 
"App\Security\Voter\EntryVoter"
7 
"App\Security\Voter\MagazineVoter"
8 
"App\Security\Voter\MessageThreadVoter"
9 
"App\Security\Voter\MessageVoter"
10 
"App\Security\Voter\NotificationVoter"
11 
"App\Security\Voter\OAuth2UserConsentVoter"
12 
"App\Security\Voter\PostCommentVoter"
13 
"App\Security\Voter\PostVoter"
14 
"App\Security\Voter\UserVoter"

Access decision log

# Result Attributes Object
1 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
2 DENIED moderate 
App\Entity\Entry {#2388
  +user: Proxies\__CG__\App\Entity\User {#1943 …}
  +magazine: App\Entity\Magazine {#266
    +icon: Proxies\__CG__\App\Entity\Image {#247 …}
    +name: "privacy@lemmy.ml"
    +title: "privacy"
    +description: """
      A place to discuss privacy and freedom in the digital world.\n
      ============================================================\n
      \n
      Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.\n
      \n
      In this community everyone is welcome to post links and discuss topics related to privacy.\n
      \n
      ### Some Rules\n
      \n
      - Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post\n
      - Don’t promote proprietary software\n
      - Try to keep things on topic\n
      - If you have a question, please try searching for previous discussions, maybe it has already been answered\n
      - Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience\n
      - Be nice :)\n
      \n
      ### Related communities\n
      \n
      - [Lemmy.ml libre_culture](https://lemmy.ml/c/libre_culture)\n
      - [Lemmy.ml privatelife](https://lemmy.ml/c/privatelife)\n
      - [Lemmy.ml DeGoogle](https://lemmy.ml/c/degoogle)\n
      - [Lemmy.ca privacy](https://lemmy.ca/c/privacy)\n
      \n
      ### Chat rooms\n
      \n
      - [Matrix/Element]Dead\n
      - [Discord](https://discord.gg/8xfrVjvngh)\n
      \n
      much thanks to @gary_host_laptop for the logo design :)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 561
    +entryCommentCount: 7684
    +postCount: 6
    +postCommentCount: 73
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729582580 {#276
      date: 2024-10-22 09:36:20.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#238 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
    +entries: Doctrine\ORM\PersistentCollection {#181 …}
    +posts: Doctrine\ORM\PersistentCollection {#139 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
    +bans: Doctrine\ORM\PersistentCollection {#118 …}
    +reports: Doctrine\ORM\PersistentCollection {#104 …}
    +badges: Doctrine\ORM\PersistentCollection {#82 …}
    +logs: Doctrine\ORM\PersistentCollection {#72 …}
    +awards: Doctrine\ORM\PersistentCollection {#61 …}
    +categories: Doctrine\ORM\PersistentCollection {#1820 …}
    -id: 85
    +apId: "privacy@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/privacy"
    +apPublicUrl: "https://lemmy.ml/c/privacy"
    +apFollowersUrl: "https://lemmy.ml/c/privacy/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "privacy"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583592 {#270
      date: 2024-10-22 09:53:12.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699780272 {#272
      date: 2023-11-12 10:11:12.0 +01:00
    }
  }
  +image: Proxies\__CG__\App\Entity\Image {#1962 …}
  +domain: Proxies\__CG__\App\Entity\Domain {#1924 …}
  +slug: "Your-Tablet-s-Light-Sensor-Can-Spy-On-You"
  +title: "Your Tablet's Light Sensor Can Spy On You"
  +url: "https://spectrum.ieee.org/ambient-light-sensor-cybersecurity-risk"
  +body: null
  +type: "link"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 0
  +favouriteCount: 17
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1705580209 {#2410
    date: 2024-01-18 13:16:49.0 +01:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1886 …}
  +votes: Doctrine\ORM\PersistentCollection {#1973 …}
  +reports: Doctrine\ORM\PersistentCollection {#1948 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
  +badges: Doctrine\ORM\PersistentCollection {#2440 …}
  +children: []
  -id: 31472
  -titleTs: "'light':4 'sensor':5 'spi':7 'tablet':2"
  -bodyTs: null
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1705616209
  +visibility: "visible             "
  +apId: "https://lemmy.ml/post/10707141"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705580209 {#1850
    date: 2024-01-18 13:16:49.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
3 DENIED edit 
App\Entity\Entry {#2388
  +user: Proxies\__CG__\App\Entity\User {#1943 …}
  +magazine: App\Entity\Magazine {#266
    +icon: Proxies\__CG__\App\Entity\Image {#247 …}
    +name: "privacy@lemmy.ml"
    +title: "privacy"
    +description: """
      A place to discuss privacy and freedom in the digital world.\n
      ============================================================\n
      \n
      Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.\n
      \n
      In this community everyone is welcome to post links and discuss topics related to privacy.\n
      \n
      ### Some Rules\n
      \n
      - Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post\n
      - Don’t promote proprietary software\n
      - Try to keep things on topic\n
      - If you have a question, please try searching for previous discussions, maybe it has already been answered\n
      - Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience\n
      - Be nice :)\n
      \n
      ### Related communities\n
      \n
      - [Lemmy.ml libre_culture](https://lemmy.ml/c/libre_culture)\n
      - [Lemmy.ml privatelife](https://lemmy.ml/c/privatelife)\n
      - [Lemmy.ml DeGoogle](https://lemmy.ml/c/degoogle)\n
      - [Lemmy.ca privacy](https://lemmy.ca/c/privacy)\n
      \n
      ### Chat rooms\n
      \n
      - [Matrix/Element]Dead\n
      - [Discord](https://discord.gg/8xfrVjvngh)\n
      \n
      much thanks to @gary_host_laptop for the logo design :)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 561
    +entryCommentCount: 7684
    +postCount: 6
    +postCommentCount: 73
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729582580 {#276
      date: 2024-10-22 09:36:20.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#238 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
    +entries: Doctrine\ORM\PersistentCollection {#181 …}
    +posts: Doctrine\ORM\PersistentCollection {#139 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
    +bans: Doctrine\ORM\PersistentCollection {#118 …}
    +reports: Doctrine\ORM\PersistentCollection {#104 …}
    +badges: Doctrine\ORM\PersistentCollection {#82 …}
    +logs: Doctrine\ORM\PersistentCollection {#72 …}
    +awards: Doctrine\ORM\PersistentCollection {#61 …}
    +categories: Doctrine\ORM\PersistentCollection {#1820 …}
    -id: 85
    +apId: "privacy@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/privacy"
    +apPublicUrl: "https://lemmy.ml/c/privacy"
    +apFollowersUrl: "https://lemmy.ml/c/privacy/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "privacy"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583592 {#270
      date: 2024-10-22 09:53:12.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699780272 {#272
      date: 2023-11-12 10:11:12.0 +01:00
    }
  }
  +image: Proxies\__CG__\App\Entity\Image {#1962 …}
  +domain: Proxies\__CG__\App\Entity\Domain {#1924 …}
  +slug: "Your-Tablet-s-Light-Sensor-Can-Spy-On-You"
  +title: "Your Tablet's Light Sensor Can Spy On You"
  +url: "https://spectrum.ieee.org/ambient-light-sensor-cybersecurity-risk"
  +body: null
  +type: "link"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 0
  +favouriteCount: 17
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1705580209 {#2410
    date: 2024-01-18 13:16:49.0 +01:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1886 …}
  +votes: Doctrine\ORM\PersistentCollection {#1973 …}
  +reports: Doctrine\ORM\PersistentCollection {#1948 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
  +badges: Doctrine\ORM\PersistentCollection {#2440 …}
  +children: []
  -id: 31472
  -titleTs: "'light':4 'sensor':5 'spi':7 'tablet':2"
  -bodyTs: null
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1705616209
  +visibility: "visible             "
  +apId: "https://lemmy.ml/post/10707141"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705580209 {#1850
    date: 2024-01-18 13:16:49.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
4 DENIED moderate 
App\Entity\Entry {#2388
  +user: Proxies\__CG__\App\Entity\User {#1943 …}
  +magazine: App\Entity\Magazine {#266
    +icon: Proxies\__CG__\App\Entity\Image {#247 …}
    +name: "privacy@lemmy.ml"
    +title: "privacy"
    +description: """
      A place to discuss privacy and freedom in the digital world.\n
      ============================================================\n
      \n
      Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.\n
      \n
      In this community everyone is welcome to post links and discuss topics related to privacy.\n
      \n
      ### Some Rules\n
      \n
      - Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post\n
      - Don’t promote proprietary software\n
      - Try to keep things on topic\n
      - If you have a question, please try searching for previous discussions, maybe it has already been answered\n
      - Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience\n
      - Be nice :)\n
      \n
      ### Related communities\n
      \n
      - [Lemmy.ml libre_culture](https://lemmy.ml/c/libre_culture)\n
      - [Lemmy.ml privatelife](https://lemmy.ml/c/privatelife)\n
      - [Lemmy.ml DeGoogle](https://lemmy.ml/c/degoogle)\n
      - [Lemmy.ca privacy](https://lemmy.ca/c/privacy)\n
      \n
      ### Chat rooms\n
      \n
      - [Matrix/Element]Dead\n
      - [Discord](https://discord.gg/8xfrVjvngh)\n
      \n
      much thanks to @gary_host_laptop for the logo design :)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 561
    +entryCommentCount: 7684
    +postCount: 6
    +postCommentCount: 73
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729582580 {#276
      date: 2024-10-22 09:36:20.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#238 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
    +entries: Doctrine\ORM\PersistentCollection {#181 …}
    +posts: Doctrine\ORM\PersistentCollection {#139 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
    +bans: Doctrine\ORM\PersistentCollection {#118 …}
    +reports: Doctrine\ORM\PersistentCollection {#104 …}
    +badges: Doctrine\ORM\PersistentCollection {#82 …}
    +logs: Doctrine\ORM\PersistentCollection {#72 …}
    +awards: Doctrine\ORM\PersistentCollection {#61 …}
    +categories: Doctrine\ORM\PersistentCollection {#1820 …}
    -id: 85
    +apId: "privacy@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/privacy"
    +apPublicUrl: "https://lemmy.ml/c/privacy"
    +apFollowersUrl: "https://lemmy.ml/c/privacy/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "privacy"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583592 {#270
      date: 2024-10-22 09:53:12.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699780272 {#272
      date: 2023-11-12 10:11:12.0 +01:00
    }
  }
  +image: Proxies\__CG__\App\Entity\Image {#1962 …}
  +domain: Proxies\__CG__\App\Entity\Domain {#1924 …}
  +slug: "Your-Tablet-s-Light-Sensor-Can-Spy-On-You"
  +title: "Your Tablet's Light Sensor Can Spy On You"
  +url: "https://spectrum.ieee.org/ambient-light-sensor-cybersecurity-risk"
  +body: null
  +type: "link"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 0
  +favouriteCount: 17
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1705580209 {#2410
    date: 2024-01-18 13:16:49.0 +01:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1886 …}
  +votes: Doctrine\ORM\PersistentCollection {#1973 …}
  +reports: Doctrine\ORM\PersistentCollection {#1948 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1927 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2442 …}
  +badges: Doctrine\ORM\PersistentCollection {#2440 …}
  +children: []
  -id: 31472
  -titleTs: "'light':4 'sensor':5 'spi':7 'tablet':2"
  -bodyTs: null
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1705616209
  +visibility: "visible             "
  +apId: "https://lemmy.ml/post/10707141"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705580209 {#1850
    date: 2024-01-18 13:16:49.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
5 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
6 DENIED moderate 
App\Entity\Entry {#3749
  +user: Proxies\__CG__\App\Entity\User {#3776 …}
  +magazine: App\Entity\Magazine {#266
    +icon: Proxies\__CG__\App\Entity\Image {#247 …}
    +name: "privacy@lemmy.ml"
    +title: "privacy"
    +description: """
      A place to discuss privacy and freedom in the digital world.\n
      ============================================================\n
      \n
      Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.\n
      \n
      In this community everyone is welcome to post links and discuss topics related to privacy.\n
      \n
      ### Some Rules\n
      \n
      - Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post\n
      - Don’t promote proprietary software\n
      - Try to keep things on topic\n
      - If you have a question, please try searching for previous discussions, maybe it has already been answered\n
      - Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience\n
      - Be nice :)\n
      \n
      ### Related communities\n
      \n
      - [Lemmy.ml libre_culture](https://lemmy.ml/c/libre_culture)\n
      - [Lemmy.ml privatelife](https://lemmy.ml/c/privatelife)\n
      - [Lemmy.ml DeGoogle](https://lemmy.ml/c/degoogle)\n
      - [Lemmy.ca privacy](https://lemmy.ca/c/privacy)\n
      \n
      ### Chat rooms\n
      \n
      - [Matrix/Element]Dead\n
      - [Discord](https://discord.gg/8xfrVjvngh)\n
      \n
      much thanks to @gary_host_laptop for the logo design :)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 561
    +entryCommentCount: 7684
    +postCount: 6
    +postCommentCount: 73
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729582580 {#276
      date: 2024-10-22 09:36:20.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#238 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
    +entries: Doctrine\ORM\PersistentCollection {#181 …}
    +posts: Doctrine\ORM\PersistentCollection {#139 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
    +bans: Doctrine\ORM\PersistentCollection {#118 …}
    +reports: Doctrine\ORM\PersistentCollection {#104 …}
    +badges: Doctrine\ORM\PersistentCollection {#82 …}
    +logs: Doctrine\ORM\PersistentCollection {#72 …}
    +awards: Doctrine\ORM\PersistentCollection {#61 …}
    +categories: Doctrine\ORM\PersistentCollection {#1820 …}
    -id: 85
    +apId: "privacy@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/privacy"
    +apPublicUrl: "https://lemmy.ml/c/privacy"
    +apFollowersUrl: "https://lemmy.ml/c/privacy/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "privacy"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583592 {#270
      date: 2024-10-22 09:53:12.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699780272 {#272
      date: 2023-11-12 10:11:12.0 +01:00
    }
  }
  +image: Proxies\__CG__\App\Entity\Image {#1962 …}
  +domain: Proxies\__CG__\App\Entity\Domain {#1924 …}
  +slug: "Your-Tablet-s-Light-Sensor-Can-Spy-On-You"
  +title: "Your Tablet's Light Sensor Can Spy On You"
  +url: "https://spectrum.ieee.org/ambient-light-sensor-cybersecurity-risk"
  +body: """
    cross-posted from: [lemmy.world/post/10921294](https://lemmy.world/post/10921294)\n
    \n
    > Quote from the article:\n
    > \n
    > > People are aware of selfie cameras on laptops and tablets and sometimes use physical blockers to cover them,” says Liu. “But for the ambient light sensor, people don’t even know that an app is using that data at all. And this sensor is always on. Liu notes that there are still no blanket restrictions for Android apps.\n
    > \n
    > Remark added by me:\n
    > \n
    > Here, it might interest readers to know that unlike Stock Android, GrapheneOS (GrapheneOS is an Android-based, open source, privacy and security-focused mobile operating system for selected Google Pixel smartphones) provides a sensors permission toggle for each app. According to their [website](https://grapheneos.org/features#network-permission-toggle):\n
    > \n
    > Sensors permission toggle: disallow access to all other sensors not covered by existing Android permissions (Camera, Microphone, Body Sensors, Activity Recognition) including an accelerometer, gyroscope, compass, barometer, thermometer and any other sensors present on a given device. When access is disabled, apps receive zeroed data when they check for sensor values and don’t receive events. GrapheneOS creates an easy to disable notification when apps try to access sensors blocked by the permission being denied. This makes the feature more usable since users can tell if the app is trying to access this functionality.\n
    > \n
    > To avoid breaking compatibility with Android apps, the added permission is enabled by default. When an app attempts to access sensors and receives zeroed data due to being denied, GrapheneOS creates a notification which can be easily disabled. The Sensors permission can be set to be disabled by default for user installed apps in Settings ➔ Privacy.\n
    > \n
    > In conclusion, allow me to emphasize another quote from the article:\n
    > \n
    > > “The acquisition time in minutes is too cumbersome to launch simple and general privacy attacks on a mass scale,” says Lukasz Olejnik, an independent security researcher and consultant who has previously highlighted the [security risks posed by ambient light sensors](https://blog.lukaszolejnik.com/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/). “However, I would not rule out the significance of targeted collections for tailored operations against chosen targets.” Liu agrees that the approach is too complicated for widespread attacks. And one saving grace is that it is unlikely to ever work on a smartphone, as the displays are simply too small. But Liu says their results demonstrate how seemingly harmless combinations of components in mobile devices can lead to surprising security risks.
    """
  +type: "link"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 5
  +favouriteCount: 109
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1727065444 {#3742
    date: 2024-09-23 06:24:04.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#3774 …}
  +votes: Doctrine\ORM\PersistentCollection {#3772 …}
  +reports: Doctrine\ORM\PersistentCollection {#3770 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3768 …}
  +notifications: Doctrine\ORM\PersistentCollection {#3766 …}
  +badges: Doctrine\ORM\PersistentCollection {#3764 …}
  +children: []
  -id: 31797
  -titleTs: "'light':4 'sensor':5 'spi':7 'tablet':2"
  -bodyTs: "'/features#network-permission-toggle):':121 '/post/10921294](https://lemmy.world/post/10921294)':7 '/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/).':325 'acceleromet':145 'access':126,160,189,213,235 'accord':115 'acquisit':284 'activ':141 'ad':71,224 'agre':344 'allow':274 'alway':56 'ambient':35,320 'android':68,84,90,135,221 'android-bas':89 'anoth':278 'app':45,69,114,163,186,209,222,232,268 'approach':347 'articl':11,282 'attack':297,353 'attempt':233 'avoid':217 'awar':14 'baromet':148 'base':91 'blanket':65 'block':191 'blocker':26 'blog.lukaszolejnik.com':324 'blog.lukaszolejnik.com/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/).':323 'bodi':139 'break':218 'camera':17,137 'check':169 'chosen':341 'collect':336 'combin':385 'compass':147 'compat':219 'complic':350 'compon':387 'conclus':273 'consult':310 'cover':28,132 'creat':179,246 'cross':2 'cross-post':1 'cumbersom':290 'data':49,166,240 'default':229,264 'demonstr':381 'deni':196,244 'devic':158,390 'disabl':162,183,253,262 'disallow':125 'display':371 'due':241 'easi':181 'easili':252 'emphas':277 'enabl':227 'even':41 'event':177 'ever':364 'exist':134 'featur':200 'focus':98 'function':215 'general':295 'given':157 'googl':104 'grace':357 'grapheneo':85,86,178,245 'grapheneos.org':120 'grapheneos.org/features#network-permission-toggle):':119 'gyroscop':146 'harmless':384 'highlight':314 'howev':326 'includ':143 'independ':306 'instal':267 'interest':77 'know':42,80 'laptop':19 'launch':292 'lead':392 'lemmy.world':6 'lemmy.world/post/10921294](https://lemmy.world/post/10921294)':5 'light':36,321 'liu':31,58,343,377 'lukasz':303 'make':198 'mass':300 'microphon':138 'might':76 'minut':287 'mobil':99,389 'note':59 'notif':184,248 'olejnik':304 'one':355 'open':92 'oper':100,339 'peopl':12,38 'permiss':110,123,136,194,225,256 'physic':25 'pixel':105 'pose':318 'post':3 'present':154 'previous':313 'privaci':94,271,296 'provid':107 'quot':8,279 'reader':78 'receiv':164,176,238 'recognit':142 'remark':70 'research':308 'restrict':66 'result':380 'risk':317,396 'rule':330 'save':356 'say':30,302,378 'scale':301 'secur':97,307,316,395 'security-focus':96 'seem':383 'select':103 'selfi':16 'sensor':37,54,109,122,130,140,153,171,190,236,255,322 'set':259,270 'signific':333 'simpl':293 'simpli':373 'sinc':203 'small':375 'smartphon':106,368 'sometim':23 'sourc':93 'still':63 'stock':83 'surpris':394 'system':101 'tablet':21 'tailor':338 'target':335,342 'tell':206 'thermomet':149 'time':285 'toggl':111,124 'tri':187,211 'unlik':82,362 'usabl':202 'use':24,47 'user':204,266 'valu':172 'websit':118 'widespread':352 'work':365 'would':328 'zero':165,239"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1705779212
  +visibility: "visible             "
  +apId: "https://lemmy.world/post/10921310"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705692812 {#3734
    date: 2024-01-19 20:33:32.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
7 DENIED edit 
App\Entity\Entry {#3749
  +user: Proxies\__CG__\App\Entity\User {#3776 …}
  +magazine: App\Entity\Magazine {#266
    +icon: Proxies\__CG__\App\Entity\Image {#247 …}
    +name: "privacy@lemmy.ml"
    +title: "privacy"
    +description: """
      A place to discuss privacy and freedom in the digital world.\n
      ============================================================\n
      \n
      Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.\n
      \n
      In this community everyone is welcome to post links and discuss topics related to privacy.\n
      \n
      ### Some Rules\n
      \n
      - Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post\n
      - Don’t promote proprietary software\n
      - Try to keep things on topic\n
      - If you have a question, please try searching for previous discussions, maybe it has already been answered\n
      - Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience\n
      - Be nice :)\n
      \n
      ### Related communities\n
      \n
      - [Lemmy.ml libre_culture](https://lemmy.ml/c/libre_culture)\n
      - [Lemmy.ml privatelife](https://lemmy.ml/c/privatelife)\n
      - [Lemmy.ml DeGoogle](https://lemmy.ml/c/degoogle)\n
      - [Lemmy.ca privacy](https://lemmy.ca/c/privacy)\n
      \n
      ### Chat rooms\n
      \n
      - [Matrix/Element]Dead\n
      - [Discord](https://discord.gg/8xfrVjvngh)\n
      \n
      much thanks to @gary_host_laptop for the logo design :)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 561
    +entryCommentCount: 7684
    +postCount: 6
    +postCommentCount: 73
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729582580 {#276
      date: 2024-10-22 09:36:20.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#238 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
    +entries: Doctrine\ORM\PersistentCollection {#181 …}
    +posts: Doctrine\ORM\PersistentCollection {#139 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
    +bans: Doctrine\ORM\PersistentCollection {#118 …}
    +reports: Doctrine\ORM\PersistentCollection {#104 …}
    +badges: Doctrine\ORM\PersistentCollection {#82 …}
    +logs: Doctrine\ORM\PersistentCollection {#72 …}
    +awards: Doctrine\ORM\PersistentCollection {#61 …}
    +categories: Doctrine\ORM\PersistentCollection {#1820 …}
    -id: 85
    +apId: "privacy@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/privacy"
    +apPublicUrl: "https://lemmy.ml/c/privacy"
    +apFollowersUrl: "https://lemmy.ml/c/privacy/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "privacy"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583592 {#270
      date: 2024-10-22 09:53:12.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699780272 {#272
      date: 2023-11-12 10:11:12.0 +01:00
    }
  }
  +image: Proxies\__CG__\App\Entity\Image {#1962 …}
  +domain: Proxies\__CG__\App\Entity\Domain {#1924 …}
  +slug: "Your-Tablet-s-Light-Sensor-Can-Spy-On-You"
  +title: "Your Tablet's Light Sensor Can Spy On You"
  +url: "https://spectrum.ieee.org/ambient-light-sensor-cybersecurity-risk"
  +body: """
    cross-posted from: [lemmy.world/post/10921294](https://lemmy.world/post/10921294)\n
    \n
    > Quote from the article:\n
    > \n
    > > People are aware of selfie cameras on laptops and tablets and sometimes use physical blockers to cover them,” says Liu. “But for the ambient light sensor, people don’t even know that an app is using that data at all. And this sensor is always on. Liu notes that there are still no blanket restrictions for Android apps.\n
    > \n
    > Remark added by me:\n
    > \n
    > Here, it might interest readers to know that unlike Stock Android, GrapheneOS (GrapheneOS is an Android-based, open source, privacy and security-focused mobile operating system for selected Google Pixel smartphones) provides a sensors permission toggle for each app. According to their [website](https://grapheneos.org/features#network-permission-toggle):\n
    > \n
    > Sensors permission toggle: disallow access to all other sensors not covered by existing Android permissions (Camera, Microphone, Body Sensors, Activity Recognition) including an accelerometer, gyroscope, compass, barometer, thermometer and any other sensors present on a given device. When access is disabled, apps receive zeroed data when they check for sensor values and don’t receive events. GrapheneOS creates an easy to disable notification when apps try to access sensors blocked by the permission being denied. This makes the feature more usable since users can tell if the app is trying to access this functionality.\n
    > \n
    > To avoid breaking compatibility with Android apps, the added permission is enabled by default. When an app attempts to access sensors and receives zeroed data due to being denied, GrapheneOS creates a notification which can be easily disabled. The Sensors permission can be set to be disabled by default for user installed apps in Settings ➔ Privacy.\n
    > \n
    > In conclusion, allow me to emphasize another quote from the article:\n
    > \n
    > > “The acquisition time in minutes is too cumbersome to launch simple and general privacy attacks on a mass scale,” says Lukasz Olejnik, an independent security researcher and consultant who has previously highlighted the [security risks posed by ambient light sensors](https://blog.lukaszolejnik.com/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/). “However, I would not rule out the significance of targeted collections for tailored operations against chosen targets.” Liu agrees that the approach is too complicated for widespread attacks. And one saving grace is that it is unlikely to ever work on a smartphone, as the displays are simply too small. But Liu says their results demonstrate how seemingly harmless combinations of components in mobile devices can lead to surprising security risks.
    """
  +type: "link"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 5
  +favouriteCount: 109
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1727065444 {#3742
    date: 2024-09-23 06:24:04.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#3774 …}
  +votes: Doctrine\ORM\PersistentCollection {#3772 …}
  +reports: Doctrine\ORM\PersistentCollection {#3770 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3768 …}
  +notifications: Doctrine\ORM\PersistentCollection {#3766 …}
  +badges: Doctrine\ORM\PersistentCollection {#3764 …}
  +children: []
  -id: 31797
  -titleTs: "'light':4 'sensor':5 'spi':7 'tablet':2"
  -bodyTs: "'/features#network-permission-toggle):':121 '/post/10921294](https://lemmy.world/post/10921294)':7 '/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/).':325 'acceleromet':145 'access':126,160,189,213,235 'accord':115 'acquisit':284 'activ':141 'ad':71,224 'agre':344 'allow':274 'alway':56 'ambient':35,320 'android':68,84,90,135,221 'android-bas':89 'anoth':278 'app':45,69,114,163,186,209,222,232,268 'approach':347 'articl':11,282 'attack':297,353 'attempt':233 'avoid':217 'awar':14 'baromet':148 'base':91 'blanket':65 'block':191 'blocker':26 'blog.lukaszolejnik.com':324 'blog.lukaszolejnik.com/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/).':323 'bodi':139 'break':218 'camera':17,137 'check':169 'chosen':341 'collect':336 'combin':385 'compass':147 'compat':219 'complic':350 'compon':387 'conclus':273 'consult':310 'cover':28,132 'creat':179,246 'cross':2 'cross-post':1 'cumbersom':290 'data':49,166,240 'default':229,264 'demonstr':381 'deni':196,244 'devic':158,390 'disabl':162,183,253,262 'disallow':125 'display':371 'due':241 'easi':181 'easili':252 'emphas':277 'enabl':227 'even':41 'event':177 'ever':364 'exist':134 'featur':200 'focus':98 'function':215 'general':295 'given':157 'googl':104 'grace':357 'grapheneo':85,86,178,245 'grapheneos.org':120 'grapheneos.org/features#network-permission-toggle):':119 'gyroscop':146 'harmless':384 'highlight':314 'howev':326 'includ':143 'independ':306 'instal':267 'interest':77 'know':42,80 'laptop':19 'launch':292 'lead':392 'lemmy.world':6 'lemmy.world/post/10921294](https://lemmy.world/post/10921294)':5 'light':36,321 'liu':31,58,343,377 'lukasz':303 'make':198 'mass':300 'microphon':138 'might':76 'minut':287 'mobil':99,389 'note':59 'notif':184,248 'olejnik':304 'one':355 'open':92 'oper':100,339 'peopl':12,38 'permiss':110,123,136,194,225,256 'physic':25 'pixel':105 'pose':318 'post':3 'present':154 'previous':313 'privaci':94,271,296 'provid':107 'quot':8,279 'reader':78 'receiv':164,176,238 'recognit':142 'remark':70 'research':308 'restrict':66 'result':380 'risk':317,396 'rule':330 'save':356 'say':30,302,378 'scale':301 'secur':97,307,316,395 'security-focus':96 'seem':383 'select':103 'selfi':16 'sensor':37,54,109,122,130,140,153,171,190,236,255,322 'set':259,270 'signific':333 'simpl':293 'simpli':373 'sinc':203 'small':375 'smartphon':106,368 'sometim':23 'sourc':93 'still':63 'stock':83 'surpris':394 'system':101 'tablet':21 'tailor':338 'target':335,342 'tell':206 'thermomet':149 'time':285 'toggl':111,124 'tri':187,211 'unlik':82,362 'usabl':202 'use':24,47 'user':204,266 'valu':172 'websit':118 'widespread':352 'work':365 'would':328 'zero':165,239"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1705779212
  +visibility: "visible             "
  +apId: "https://lemmy.world/post/10921310"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705692812 {#3734
    date: 2024-01-19 20:33:32.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
8 DENIED moderate 
App\Entity\Entry {#3749
  +user: Proxies\__CG__\App\Entity\User {#3776 …}
  +magazine: App\Entity\Magazine {#266
    +icon: Proxies\__CG__\App\Entity\Image {#247 …}
    +name: "privacy@lemmy.ml"
    +title: "privacy"
    +description: """
      A place to discuss privacy and freedom in the digital world.\n
      ============================================================\n
      \n
      Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.\n
      \n
      In this community everyone is welcome to post links and discuss topics related to privacy.\n
      \n
      ### Some Rules\n
      \n
      - Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post\n
      - Don’t promote proprietary software\n
      - Try to keep things on topic\n
      - If you have a question, please try searching for previous discussions, maybe it has already been answered\n
      - Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience\n
      - Be nice :)\n
      \n
      ### Related communities\n
      \n
      - [Lemmy.ml libre_culture](https://lemmy.ml/c/libre_culture)\n
      - [Lemmy.ml privatelife](https://lemmy.ml/c/privatelife)\n
      - [Lemmy.ml DeGoogle](https://lemmy.ml/c/degoogle)\n
      - [Lemmy.ca privacy](https://lemmy.ca/c/privacy)\n
      \n
      ### Chat rooms\n
      \n
      - [Matrix/Element]Dead\n
      - [Discord](https://discord.gg/8xfrVjvngh)\n
      \n
      much thanks to @gary_host_laptop for the logo design :)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 561
    +entryCommentCount: 7684
    +postCount: 6
    +postCommentCount: 73
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729582580 {#276
      date: 2024-10-22 09:36:20.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#238 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
    +entries: Doctrine\ORM\PersistentCollection {#181 …}
    +posts: Doctrine\ORM\PersistentCollection {#139 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
    +bans: Doctrine\ORM\PersistentCollection {#118 …}
    +reports: Doctrine\ORM\PersistentCollection {#104 …}
    +badges: Doctrine\ORM\PersistentCollection {#82 …}
    +logs: Doctrine\ORM\PersistentCollection {#72 …}
    +awards: Doctrine\ORM\PersistentCollection {#61 …}
    +categories: Doctrine\ORM\PersistentCollection {#1820 …}
    -id: 85
    +apId: "privacy@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/privacy"
    +apPublicUrl: "https://lemmy.ml/c/privacy"
    +apFollowersUrl: "https://lemmy.ml/c/privacy/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "privacy"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583592 {#270
      date: 2024-10-22 09:53:12.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699780272 {#272
      date: 2023-11-12 10:11:12.0 +01:00
    }
  }
  +image: Proxies\__CG__\App\Entity\Image {#1962 …}
  +domain: Proxies\__CG__\App\Entity\Domain {#1924 …}
  +slug: "Your-Tablet-s-Light-Sensor-Can-Spy-On-You"
  +title: "Your Tablet's Light Sensor Can Spy On You"
  +url: "https://spectrum.ieee.org/ambient-light-sensor-cybersecurity-risk"
  +body: """
    cross-posted from: [lemmy.world/post/10921294](https://lemmy.world/post/10921294)\n
    \n
    > Quote from the article:\n
    > \n
    > > People are aware of selfie cameras on laptops and tablets and sometimes use physical blockers to cover them,” says Liu. “But for the ambient light sensor, people don’t even know that an app is using that data at all. And this sensor is always on. Liu notes that there are still no blanket restrictions for Android apps.\n
    > \n
    > Remark added by me:\n
    > \n
    > Here, it might interest readers to know that unlike Stock Android, GrapheneOS (GrapheneOS is an Android-based, open source, privacy and security-focused mobile operating system for selected Google Pixel smartphones) provides a sensors permission toggle for each app. According to their [website](https://grapheneos.org/features#network-permission-toggle):\n
    > \n
    > Sensors permission toggle: disallow access to all other sensors not covered by existing Android permissions (Camera, Microphone, Body Sensors, Activity Recognition) including an accelerometer, gyroscope, compass, barometer, thermometer and any other sensors present on a given device. When access is disabled, apps receive zeroed data when they check for sensor values and don’t receive events. GrapheneOS creates an easy to disable notification when apps try to access sensors blocked by the permission being denied. This makes the feature more usable since users can tell if the app is trying to access this functionality.\n
    > \n
    > To avoid breaking compatibility with Android apps, the added permission is enabled by default. When an app attempts to access sensors and receives zeroed data due to being denied, GrapheneOS creates a notification which can be easily disabled. The Sensors permission can be set to be disabled by default for user installed apps in Settings ➔ Privacy.\n
    > \n
    > In conclusion, allow me to emphasize another quote from the article:\n
    > \n
    > > “The acquisition time in minutes is too cumbersome to launch simple and general privacy attacks on a mass scale,” says Lukasz Olejnik, an independent security researcher and consultant who has previously highlighted the [security risks posed by ambient light sensors](https://blog.lukaszolejnik.com/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/). “However, I would not rule out the significance of targeted collections for tailored operations against chosen targets.” Liu agrees that the approach is too complicated for widespread attacks. And one saving grace is that it is unlikely to ever work on a smartphone, as the displays are simply too small. But Liu says their results demonstrate how seemingly harmless combinations of components in mobile devices can lead to surprising security risks.
    """
  +type: "link"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 5
  +favouriteCount: 109
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1727065444 {#3742
    date: 2024-09-23 06:24:04.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#3774 …}
  +votes: Doctrine\ORM\PersistentCollection {#3772 …}
  +reports: Doctrine\ORM\PersistentCollection {#3770 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3768 …}
  +notifications: Doctrine\ORM\PersistentCollection {#3766 …}
  +badges: Doctrine\ORM\PersistentCollection {#3764 …}
  +children: []
  -id: 31797
  -titleTs: "'light':4 'sensor':5 'spi':7 'tablet':2"
  -bodyTs: "'/features#network-permission-toggle):':121 '/post/10921294](https://lemmy.world/post/10921294)':7 '/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/).':325 'acceleromet':145 'access':126,160,189,213,235 'accord':115 'acquisit':284 'activ':141 'ad':71,224 'agre':344 'allow':274 'alway':56 'ambient':35,320 'android':68,84,90,135,221 'android-bas':89 'anoth':278 'app':45,69,114,163,186,209,222,232,268 'approach':347 'articl':11,282 'attack':297,353 'attempt':233 'avoid':217 'awar':14 'baromet':148 'base':91 'blanket':65 'block':191 'blocker':26 'blog.lukaszolejnik.com':324 'blog.lukaszolejnik.com/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/).':323 'bodi':139 'break':218 'camera':17,137 'check':169 'chosen':341 'collect':336 'combin':385 'compass':147 'compat':219 'complic':350 'compon':387 'conclus':273 'consult':310 'cover':28,132 'creat':179,246 'cross':2 'cross-post':1 'cumbersom':290 'data':49,166,240 'default':229,264 'demonstr':381 'deni':196,244 'devic':158,390 'disabl':162,183,253,262 'disallow':125 'display':371 'due':241 'easi':181 'easili':252 'emphas':277 'enabl':227 'even':41 'event':177 'ever':364 'exist':134 'featur':200 'focus':98 'function':215 'general':295 'given':157 'googl':104 'grace':357 'grapheneo':85,86,178,245 'grapheneos.org':120 'grapheneos.org/features#network-permission-toggle):':119 'gyroscop':146 'harmless':384 'highlight':314 'howev':326 'includ':143 'independ':306 'instal':267 'interest':77 'know':42,80 'laptop':19 'launch':292 'lead':392 'lemmy.world':6 'lemmy.world/post/10921294](https://lemmy.world/post/10921294)':5 'light':36,321 'liu':31,58,343,377 'lukasz':303 'make':198 'mass':300 'microphon':138 'might':76 'minut':287 'mobil':99,389 'note':59 'notif':184,248 'olejnik':304 'one':355 'open':92 'oper':100,339 'peopl':12,38 'permiss':110,123,136,194,225,256 'physic':25 'pixel':105 'pose':318 'post':3 'present':154 'previous':313 'privaci':94,271,296 'provid':107 'quot':8,279 'reader':78 'receiv':164,176,238 'recognit':142 'remark':70 'research':308 'restrict':66 'result':380 'risk':317,396 'rule':330 'save':356 'say':30,302,378 'scale':301 'secur':97,307,316,395 'security-focus':96 'seem':383 'select':103 'selfi':16 'sensor':37,54,109,122,130,140,153,171,190,236,255,322 'set':259,270 'signific':333 'simpl':293 'simpli':373 'sinc':203 'small':375 'smartphon':106,368 'sometim':23 'sourc':93 'still':63 'stock':83 'surpris':394 'system':101 'tablet':21 'tailor':338 'target':335,342 'tell':206 'thermomet':149 'time':285 'toggl':111,124 'tri':187,211 'unlik':82,362 'usabl':202 'use':24,47 'user':204,266 'valu':172 'websit':118 'widespread':352 'work':365 'would':328 'zero':165,239"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1705779212
  +visibility: "visible             "
  +apId: "https://lemmy.world/post/10921310"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705692812 {#3734
    date: 2024-01-19 20:33:32.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
9 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
10 DENIED moderate 
App\Entity\Entry {#3760
  +user: Proxies\__CG__\App\Entity\User {#3776 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#3798 …}
  +image: Proxies\__CG__\App\Entity\Image {#1962 …}
  +domain: Proxies\__CG__\App\Entity\Domain {#1924 …}
  +slug: "Your-Tablet-s-Light-Sensor-Can-Spy-On-You"
  +title: "Your Tablet's Light Sensor Can Spy On You"
  +url: "https://spectrum.ieee.org/ambient-light-sensor-cybersecurity-risk"
  +body: """
    Quote from the article:\n
    \n
    > People are aware of selfie cameras on laptops and tablets and sometimes use physical blockers to cover them,” says Liu. “But for the ambient light sensor, people don’t even know that an app is using that data at all. And this sensor is always on. Liu notes that there are still no blanket restrictions for Android apps.\n
    \n
    Remark added by me:\n
    \n
    Here, it might interest readers to know that unlike Stock Android, GrapheneOS (GrapheneOS is an Android-based, open source, privacy and security-focused mobile operating system for selected Google Pixel smartphones) provides a sensors permission toggle for each app. According to their [website](https://grapheneos.org/features#network-permission-toggle):\n
    \n
    Sensors permission toggle: disallow access to all other sensors not covered by existing Android permissions (Camera, Microphone, Body Sensors, Activity Recognition) including an accelerometer, gyroscope, compass, barometer, thermometer and any other sensors present on a given device. When access is disabled, apps receive zeroed data when they check for sensor values and don’t receive events. GrapheneOS creates an easy to disable notification when apps try to access sensors blocked by the permission being denied. This makes the feature more usable since users can tell if the app is trying to access this functionality.\n
    \n
    To avoid breaking compatibility with Android apps, the added permission is enabled by default. When an app attempts to access sensors and receives zeroed data due to being denied, GrapheneOS creates a notification which can be easily disabled. The Sensors permission can be set to be disabled by default for user installed apps in Settings ➔ Privacy.\n
    \n
    In conclusion, allow me to emphasize another quote from the article:\n
    \n
    > “The acquisition time in minutes is too cumbersome to launch simple and general privacy attacks on a mass scale,” says Lukasz Olejnik, an independent security researcher and consultant who has previously highlighted the [security risks posed by ambient light sensors](https://blog.lukaszolejnik.com/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/). “However, I would not rule out the significance of targeted collections for tailored operations against chosen targets.” Liu agrees that the approach is too complicated for widespread attacks. And one saving grace is that it is unlikely to ever work on a smartphone, as the displays are simply too small. But Liu says their results demonstrate how seemingly harmless combinations of components in mobile devices can lead to surprising security risks.
    """
  +type: "link"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 1
  +favouriteCount: 24
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1727096005 {#3762
    date: 2024-09-23 14:53:25.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#3805 …}
  +votes: Doctrine\ORM\PersistentCollection {#3807 …}
  +reports: Doctrine\ORM\PersistentCollection {#3804 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3814 …}
  +notifications: Doctrine\ORM\PersistentCollection {#3815 …}
  +badges: Doctrine\ORM\PersistentCollection {#3816 …}
  +children: []
  -id: 31795
  -titleTs: "'light':4 'sensor':5 'spi':7 'tablet':2"
  -bodyTs: "'/features#network-permission-toggle):':114 '/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/).':318 'acceleromet':138 'access':119,153,182,206,228 'accord':108 'acquisit':277 'activ':134 'ad':64,217 'agre':337 'allow':267 'alway':49 'ambient':28,313 'android':61,77,83,128,214 'android-bas':82 'anoth':271 'app':38,62,107,156,179,202,215,225,261 'approach':340 'articl':4,275 'attack':290,346 'attempt':226 'avoid':210 'awar':7 'baromet':141 'base':84 'blanket':58 'block':184 'blocker':19 'blog.lukaszolejnik.com':317 'blog.lukaszolejnik.com/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/).':316 'bodi':132 'break':211 'camera':10,130 'check':162 'chosen':334 'collect':329 'combin':378 'compass':140 'compat':212 'complic':343 'compon':380 'conclus':266 'consult':303 'cover':21,125 'creat':172,239 'cumbersom':283 'data':42,159,233 'default':222,257 'demonstr':374 'deni':189,237 'devic':151,383 'disabl':155,176,246,255 'disallow':118 'display':364 'due':234 'easi':174 'easili':245 'emphas':270 'enabl':220 'even':34 'event':170 'ever':357 'exist':127 'featur':193 'focus':91 'function':208 'general':288 'given':150 'googl':97 'grace':350 'grapheneo':78,79,171,238 'grapheneos.org':113 'grapheneos.org/features#network-permission-toggle):':112 'gyroscop':139 'harmless':377 'highlight':307 'howev':319 'includ':136 'independ':299 'instal':260 'interest':70 'know':35,73 'laptop':12 'launch':285 'lead':385 'light':29,314 'liu':24,51,336,370 'lukasz':296 'make':191 'mass':293 'microphon':131 'might':69 'minut':280 'mobil':92,382 'note':52 'notif':177,241 'olejnik':297 'one':348 'open':85 'oper':93,332 'peopl':5,31 'permiss':103,116,129,187,218,249 'physic':18 'pixel':98 'pose':311 'present':147 'previous':306 'privaci':87,264,289 'provid':100 'quot':1,272 'reader':71 'receiv':157,169,231 'recognit':135 'remark':63 'research':301 'restrict':59 'result':373 'risk':310,389 'rule':323 'save':349 'say':23,295,371 'scale':294 'secur':90,300,309,388 'security-focus':89 'seem':376 'select':96 'selfi':9 'sensor':30,47,102,115,123,133,146,164,183,229,248,315 'set':252,263 'signific':326 'simpl':286 'simpli':366 'sinc':196 'small':368 'smartphon':99,361 'sometim':16 'sourc':86 'still':56 'stock':76 'surpris':387 'system':94 'tablet':14 'tailor':331 'target':328,335 'tell':199 'thermomet':142 'time':278 'toggl':104,117 'tri':180,204 'unlik':75,355 'usabl':195 'use':17,40 'user':197,259 'valu':165 'websit':111 'widespread':345 'work':358 'would':321 'zero':158,232"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1705753177
  +visibility: "visible             "
  +apId: "https://lemmy.world/post/10921294"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705692677 {#3761
    date: 2024-01-19 20:31:17.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
11 DENIED edit 
App\Entity\Entry {#3760
  +user: Proxies\__CG__\App\Entity\User {#3776 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#3798 …}
  +image: Proxies\__CG__\App\Entity\Image {#1962 …}
  +domain: Proxies\__CG__\App\Entity\Domain {#1924 …}
  +slug: "Your-Tablet-s-Light-Sensor-Can-Spy-On-You"
  +title: "Your Tablet's Light Sensor Can Spy On You"
  +url: "https://spectrum.ieee.org/ambient-light-sensor-cybersecurity-risk"
  +body: """
    Quote from the article:\n
    \n
    > People are aware of selfie cameras on laptops and tablets and sometimes use physical blockers to cover them,” says Liu. “But for the ambient light sensor, people don’t even know that an app is using that data at all. And this sensor is always on. Liu notes that there are still no blanket restrictions for Android apps.\n
    \n
    Remark added by me:\n
    \n
    Here, it might interest readers to know that unlike Stock Android, GrapheneOS (GrapheneOS is an Android-based, open source, privacy and security-focused mobile operating system for selected Google Pixel smartphones) provides a sensors permission toggle for each app. According to their [website](https://grapheneos.org/features#network-permission-toggle):\n
    \n
    Sensors permission toggle: disallow access to all other sensors not covered by existing Android permissions (Camera, Microphone, Body Sensors, Activity Recognition) including an accelerometer, gyroscope, compass, barometer, thermometer and any other sensors present on a given device. When access is disabled, apps receive zeroed data when they check for sensor values and don’t receive events. GrapheneOS creates an easy to disable notification when apps try to access sensors blocked by the permission being denied. This makes the feature more usable since users can tell if the app is trying to access this functionality.\n
    \n
    To avoid breaking compatibility with Android apps, the added permission is enabled by default. When an app attempts to access sensors and receives zeroed data due to being denied, GrapheneOS creates a notification which can be easily disabled. The Sensors permission can be set to be disabled by default for user installed apps in Settings ➔ Privacy.\n
    \n
    In conclusion, allow me to emphasize another quote from the article:\n
    \n
    > “The acquisition time in minutes is too cumbersome to launch simple and general privacy attacks on a mass scale,” says Lukasz Olejnik, an independent security researcher and consultant who has previously highlighted the [security risks posed by ambient light sensors](https://blog.lukaszolejnik.com/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/). “However, I would not rule out the significance of targeted collections for tailored operations against chosen targets.” Liu agrees that the approach is too complicated for widespread attacks. And one saving grace is that it is unlikely to ever work on a smartphone, as the displays are simply too small. But Liu says their results demonstrate how seemingly harmless combinations of components in mobile devices can lead to surprising security risks.
    """
  +type: "link"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 1
  +favouriteCount: 24
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1727096005 {#3762
    date: 2024-09-23 14:53:25.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#3805 …}
  +votes: Doctrine\ORM\PersistentCollection {#3807 …}
  +reports: Doctrine\ORM\PersistentCollection {#3804 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3814 …}
  +notifications: Doctrine\ORM\PersistentCollection {#3815 …}
  +badges: Doctrine\ORM\PersistentCollection {#3816 …}
  +children: []
  -id: 31795
  -titleTs: "'light':4 'sensor':5 'spi':7 'tablet':2"
  -bodyTs: "'/features#network-permission-toggle):':114 '/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/).':318 'acceleromet':138 'access':119,153,182,206,228 'accord':108 'acquisit':277 'activ':134 'ad':64,217 'agre':337 'allow':267 'alway':49 'ambient':28,313 'android':61,77,83,128,214 'android-bas':82 'anoth':271 'app':38,62,107,156,179,202,215,225,261 'approach':340 'articl':4,275 'attack':290,346 'attempt':226 'avoid':210 'awar':7 'baromet':141 'base':84 'blanket':58 'block':184 'blocker':19 'blog.lukaszolejnik.com':317 'blog.lukaszolejnik.com/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/).':316 'bodi':132 'break':211 'camera':10,130 'check':162 'chosen':334 'collect':329 'combin':378 'compass':140 'compat':212 'complic':343 'compon':380 'conclus':266 'consult':303 'cover':21,125 'creat':172,239 'cumbersom':283 'data':42,159,233 'default':222,257 'demonstr':374 'deni':189,237 'devic':151,383 'disabl':155,176,246,255 'disallow':118 'display':364 'due':234 'easi':174 'easili':245 'emphas':270 'enabl':220 'even':34 'event':170 'ever':357 'exist':127 'featur':193 'focus':91 'function':208 'general':288 'given':150 'googl':97 'grace':350 'grapheneo':78,79,171,238 'grapheneos.org':113 'grapheneos.org/features#network-permission-toggle):':112 'gyroscop':139 'harmless':377 'highlight':307 'howev':319 'includ':136 'independ':299 'instal':260 'interest':70 'know':35,73 'laptop':12 'launch':285 'lead':385 'light':29,314 'liu':24,51,336,370 'lukasz':296 'make':191 'mass':293 'microphon':131 'might':69 'minut':280 'mobil':92,382 'note':52 'notif':177,241 'olejnik':297 'one':348 'open':85 'oper':93,332 'peopl':5,31 'permiss':103,116,129,187,218,249 'physic':18 'pixel':98 'pose':311 'present':147 'previous':306 'privaci':87,264,289 'provid':100 'quot':1,272 'reader':71 'receiv':157,169,231 'recognit':135 'remark':63 'research':301 'restrict':59 'result':373 'risk':310,389 'rule':323 'save':349 'say':23,295,371 'scale':294 'secur':90,300,309,388 'security-focus':89 'seem':376 'select':96 'selfi':9 'sensor':30,47,102,115,123,133,146,164,183,229,248,315 'set':252,263 'signific':326 'simpl':286 'simpli':366 'sinc':196 'small':368 'smartphon':99,361 'sometim':16 'sourc':86 'still':56 'stock':76 'surpris':387 'system':94 'tablet':14 'tailor':331 'target':328,335 'tell':199 'thermomet':142 'time':278 'toggl':104,117 'tri':180,204 'unlik':75,355 'usabl':195 'use':17,40 'user':197,259 'valu':165 'websit':111 'widespread':345 'work':358 'would':321 'zero':158,232"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1705753177
  +visibility: "visible             "
  +apId: "https://lemmy.world/post/10921294"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705692677 {#3761
    date: 2024-01-19 20:31:17.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
12 DENIED moderate 
App\Entity\Entry {#3760
  +user: Proxies\__CG__\App\Entity\User {#3776 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#3798 …}
  +image: Proxies\__CG__\App\Entity\Image {#1962 …}
  +domain: Proxies\__CG__\App\Entity\Domain {#1924 …}
  +slug: "Your-Tablet-s-Light-Sensor-Can-Spy-On-You"
  +title: "Your Tablet's Light Sensor Can Spy On You"
  +url: "https://spectrum.ieee.org/ambient-light-sensor-cybersecurity-risk"
  +body: """
    Quote from the article:\n
    \n
    > People are aware of selfie cameras on laptops and tablets and sometimes use physical blockers to cover them,” says Liu. “But for the ambient light sensor, people don’t even know that an app is using that data at all. And this sensor is always on. Liu notes that there are still no blanket restrictions for Android apps.\n
    \n
    Remark added by me:\n
    \n
    Here, it might interest readers to know that unlike Stock Android, GrapheneOS (GrapheneOS is an Android-based, open source, privacy and security-focused mobile operating system for selected Google Pixel smartphones) provides a sensors permission toggle for each app. According to their [website](https://grapheneos.org/features#network-permission-toggle):\n
    \n
    Sensors permission toggle: disallow access to all other sensors not covered by existing Android permissions (Camera, Microphone, Body Sensors, Activity Recognition) including an accelerometer, gyroscope, compass, barometer, thermometer and any other sensors present on a given device. When access is disabled, apps receive zeroed data when they check for sensor values and don’t receive events. GrapheneOS creates an easy to disable notification when apps try to access sensors blocked by the permission being denied. This makes the feature more usable since users can tell if the app is trying to access this functionality.\n
    \n
    To avoid breaking compatibility with Android apps, the added permission is enabled by default. When an app attempts to access sensors and receives zeroed data due to being denied, GrapheneOS creates a notification which can be easily disabled. The Sensors permission can be set to be disabled by default for user installed apps in Settings ➔ Privacy.\n
    \n
    In conclusion, allow me to emphasize another quote from the article:\n
    \n
    > “The acquisition time in minutes is too cumbersome to launch simple and general privacy attacks on a mass scale,” says Lukasz Olejnik, an independent security researcher and consultant who has previously highlighted the [security risks posed by ambient light sensors](https://blog.lukaszolejnik.com/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/). “However, I would not rule out the significance of targeted collections for tailored operations against chosen targets.” Liu agrees that the approach is too complicated for widespread attacks. And one saving grace is that it is unlikely to ever work on a smartphone, as the displays are simply too small. But Liu says their results demonstrate how seemingly harmless combinations of components in mobile devices can lead to surprising security risks.
    """
  +type: "link"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 1
  +favouriteCount: 24
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1727096005 {#3762
    date: 2024-09-23 14:53:25.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#3805 …}
  +votes: Doctrine\ORM\PersistentCollection {#3807 …}
  +reports: Doctrine\ORM\PersistentCollection {#3804 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3814 …}
  +notifications: Doctrine\ORM\PersistentCollection {#3815 …}
  +badges: Doctrine\ORM\PersistentCollection {#3816 …}
  +children: []
  -id: 31795
  -titleTs: "'light':4 'sensor':5 'spi':7 'tablet':2"
  -bodyTs: "'/features#network-permission-toggle):':114 '/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/).':318 'acceleromet':138 'access':119,153,182,206,228 'accord':108 'acquisit':277 'activ':134 'ad':64,217 'agre':337 'allow':267 'alway':49 'ambient':28,313 'android':61,77,83,128,214 'android-bas':82 'anoth':271 'app':38,62,107,156,179,202,215,225,261 'approach':340 'articl':4,275 'attack':290,346 'attempt':226 'avoid':210 'awar':7 'baromet':141 'base':84 'blanket':58 'block':184 'blocker':19 'blog.lukaszolejnik.com':317 'blog.lukaszolejnik.com/shedding-light-on-designing-web-features-with-privacy-risks-impact-assessments-case-study/).':316 'bodi':132 'break':211 'camera':10,130 'check':162 'chosen':334 'collect':329 'combin':378 'compass':140 'compat':212 'complic':343 'compon':380 'conclus':266 'consult':303 'cover':21,125 'creat':172,239 'cumbersom':283 'data':42,159,233 'default':222,257 'demonstr':374 'deni':189,237 'devic':151,383 'disabl':155,176,246,255 'disallow':118 'display':364 'due':234 'easi':174 'easili':245 'emphas':270 'enabl':220 'even':34 'event':170 'ever':357 'exist':127 'featur':193 'focus':91 'function':208 'general':288 'given':150 'googl':97 'grace':350 'grapheneo':78,79,171,238 'grapheneos.org':113 'grapheneos.org/features#network-permission-toggle):':112 'gyroscop':139 'harmless':377 'highlight':307 'howev':319 'includ':136 'independ':299 'instal':260 'interest':70 'know':35,73 'laptop':12 'launch':285 'lead':385 'light':29,314 'liu':24,51,336,370 'lukasz':296 'make':191 'mass':293 'microphon':131 'might':69 'minut':280 'mobil':92,382 'note':52 'notif':177,241 'olejnik':297 'one':348 'open':85 'oper':93,332 'peopl':5,31 'permiss':103,116,129,187,218,249 'physic':18 'pixel':98 'pose':311 'present':147 'previous':306 'privaci':87,264,289 'provid':100 'quot':1,272 'reader':71 'receiv':157,169,231 'recognit':135 'remark':63 'research':301 'restrict':59 'result':373 'risk':310,389 'rule':323 'save':349 'say':23,295,371 'scale':294 'secur':90,300,309,388 'security-focus':89 'seem':376 'select':96 'selfi':9 'sensor':30,47,102,115,123,133,146,164,183,229,248,315 'set':252,263 'signific':326 'simpl':286 'simpli':366 'sinc':196 'small':368 'smartphon':99,361 'sometim':16 'sourc':86 'still':56 'stock':76 'surpris':387 'system':94 'tablet':14 'tailor':331 'target':328,335 'tell':199 'thermomet':142 'time':278 'toggl':104,117 'tri':180,204 'unlik':75,355 'usabl':195 'use':17,40 'user':197,259 'valu':165 'websit':111 'widespread':345 'work':358 'would':321 'zero':158,232"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1705753177
  +visibility: "visible             "
  +apId: "https://lemmy.world/post/10921294"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705692677 {#3761
    date: 2024-01-19 20:31:17.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
13 DENIED edit 
App\Entity\Magazine {#266
  +icon: Proxies\__CG__\App\Entity\Image {#247 …}
  +name: "privacy@lemmy.ml"
  +title: "privacy"
  +description: """
    A place to discuss privacy and freedom in the digital world.\n
    ============================================================\n
    \n
    Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.\n
    \n
    In this community everyone is welcome to post links and discuss topics related to privacy.\n
    \n
    ### Some Rules\n
    \n
    - Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post\n
    - Don’t promote proprietary software\n
    - Try to keep things on topic\n
    - If you have a question, please try searching for previous discussions, maybe it has already been answered\n
    - Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience\n
    - Be nice :)\n
    \n
    ### Related communities\n
    \n
    - [Lemmy.ml libre_culture](https://lemmy.ml/c/libre_culture)\n
    - [Lemmy.ml privatelife](https://lemmy.ml/c/privatelife)\n
    - [Lemmy.ml DeGoogle](https://lemmy.ml/c/degoogle)\n
    - [Lemmy.ca privacy](https://lemmy.ca/c/privacy)\n
    \n
    ### Chat rooms\n
    \n
    - [Matrix/Element]Dead\n
    - [Discord](https://discord.gg/8xfrVjvngh)\n
    \n
    much thanks to @gary_host_laptop for the logo design :)
    """
  +rules: null
  +subscriptionsCount: 1
  +entryCount: 561
  +entryCommentCount: 7684
  +postCount: 6
  +postCommentCount: 73
  +isAdult: false
  +customCss: null
  +lastActive: DateTime @1729582580 {#276
    date: 2024-10-22 09:36:20.0 +02:00
  }
  +markedForDeletionAt: null
  +tags: null
  +moderators: Doctrine\ORM\PersistentCollection {#238 …}
  +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
  +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
  +entries: Doctrine\ORM\PersistentCollection {#181 …}
  +posts: Doctrine\ORM\PersistentCollection {#139 …}
  +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
  +bans: Doctrine\ORM\PersistentCollection {#118 …}
  +reports: Doctrine\ORM\PersistentCollection {#104 …}
  +badges: Doctrine\ORM\PersistentCollection {#82 …}
  +logs: Doctrine\ORM\PersistentCollection {#72 …}
  +awards: Doctrine\ORM\PersistentCollection {#61 …}
  +categories: Doctrine\ORM\PersistentCollection {#1820 …}
  -id: 85
  +apId: "privacy@lemmy.ml"
  +apProfileId: "https://lemmy.ml/c/privacy"
  +apPublicUrl: "https://lemmy.ml/c/privacy"
  +apFollowersUrl: "https://lemmy.ml/c/privacy/followers"
  +apInboxUrl: "https://lemmy.ml/inbox"
  +apDomain: "lemmy.ml"
  +apPreferredUsername: "privacy"
  +apDiscoverable: true
  +apManuallyApprovesFollowers: null
  +privateKey: null
  +publicKey: null
  +apFetchedAt: DateTime @1729583592 {#270
    date: 2024-10-22 09:53:12.0 +02:00
  }
  +apDeletedAt: null
  +apTimeoutAt: null
  +visibility: "visible             "
  +createdAt: DateTimeImmutable @1699780272 {#272
    date: 2023-11-12 10:11:12.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS DENIED 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details