Hacker News Reader

The accelerometer calibration can be detected by websites and is a way to identify users. On the other side the use case for websites is pretty limited.

https://sensorid.cl.cam.ac.uk/

I was going to say Apple must have became aware of such flaw a year ago (iOS 12.2). However checking back on the article I see it is from 2013! So for all this time nothing has been done, Apple reacted last year, and Google has done nothing. Worrying.

It still works in iOS.

By locked down, do you mean requiring justification to get through the app store or accessing the data at all? The latter is no problem for iOS-only [0] or Flutter [1]. I've been spending much time with cross-platform sensor access in Flutter. It works.

[0] https://developer.apple.com/documentation/coremotion/getting...

[1] https://pub.dev/packages/sensors

> in Safari

Meanwhile in Android land, Chrome gives all websites access to sensor data without any permission prompts!

AFAIR, it is the same for Safari on iOS.