Remix.run Logo
geophph 5 hours ago

> strava.com : Login works now that Navigator.getBattery throws the spec-mandated error type instead of one of our own (#8770).

what’s Strava want with my battery level?

yurishimo 5 hours ago | parent | next [-]

Maybe it uses some that battery API as a heuristic for a lower-power version of the site? Or maybe they have a web-only version in developing markets? Low battery means it should query for your location less often to save battery?

Totally spitballing here. Strava being a website that requests battery does not seem wildly outlandish to me, albeit it is a bit suspicious in general.

einpoklum 5 hours ago | parent | next [-]

> it uses some that battery API as a heuristic for a lower-power version of the site?

As a naive user I would expect websites to not be able to receive information about my battery state. With that information they can track my mobile phone usage pattern, and with some cross-referencing gain even more specific private information.

lukan 5 hours ago | parent [-]

I think it is great that the API exists, but it is not great, that no permission from the user is needed to access it.

geophph 5 hours ago | parent | prev [-]

[dead]

NBPEL 2 hours ago | parent | prev | next [-]

Most likely for generating unique fingerprint for tracking

charcircuit 4 hours ago | parent | prev [-]

Bots trying to brute force accounts may not have the API implemented like a real device may.

fooqux 2 hours ago | parent [-]

Sure, and my desktop computer just reports 100% battery level? Which can't be easily replicated by a static header in the bot?

This would be a silly thing to use to identify bots.

charcircuit an hour ago | parent [-]

It's not silly if it works.