← Back to context

Comment by jodrellblank

5 years ago

Recently I’ve seen a jump in the number of random sites popping up a “this site wants to access VR hardware” dialogs in FireFox; news articles nothing to do with VR or visualisation. I don’t have any VR devices.

How do you do this bit “requiring explicit permission from the user before a web application can use them” without the fallout of “its just a hundred thousand popups and you’re done!” on every page?

Easy. You don't have them in popups, you have them in a dropdown that the user selects themselves. Websites then need to learn to fail gracefully if not given certain permissions, otherwise consumers need to stop using those websites.

The solution to privacy concerns is not "nuke functionality", it's "don't let websites abuse functionality for tracking purposes".

Just like how with native apps on iOS, the solution is not "don't let apps ever access GPS data", it's provide a UX that makes it fairly easy to choose and don't provide permissions to apps that don't need them.

I'd argue that what Firefox do with the tilting icon for Push Notification is not that bad. I'm surprised they do not do the same for other type of permission as they are these request popups are equally annoying.

However, I have to admit that displaying one icon per permission would not scale great when having a dozen of them.

Just the constant "this website would like to send you push notifications" on every last damn site.

  • Part of me wishes that browsers dropped support for web push notifications entirely. Or at least bury it in the browser settings somewhere. At best, they provide marginal value to me, and at worse, they're just spammy.

    My parents aren't techsavy at all, so when they get those push notification requests, they just hit "accept". They now get dozens of spammy ads sent to them via push notifications (eg, "30% off sale, buy now!")

    I've disabled web push notifications entirely, but I still get JavaScript-based prompts asking me for permission to turn on notifications. I already explicitly said no, yet web developers still feel compelled to find workarounds to interrupt my work and ask me for permissions (why?).

    I get that in theory, web notifications are supposed to be valuable, but in practice its been nothing more than a constant annoyance for me.