Opened 5 years ago

Closed 5 years ago

Last modified 12 months ago

#13617 closed task (fixed)

"Take Picture" option in Instantbird

Reported by: sukhbir Owned by:
Priority: Medium Milestone:
Component: Archived/Tor Messenger Version:
Severity: Keywords: usability, security
Cc: arlolra, mrphs Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Instantbird allows a user to take a picture through their webcam. This image is used as the display picture for chat protocols that support it and also on the main window. To access this option, click the blank image next to the name on the main Instantbird screen and choose "Take Picture". Instantbird will then access your webcam.

Should we disable this option completely or should we warn the user when they attempt to do this?

Child Tickets

Change History (7)

comment:1 Changed 5 years ago by sukhbir

Keywords: usability added

comment:2 Changed 5 years ago by sukhbir

Cc: mrphs added

comment:3 Changed 5 years ago by mrphs

I think most ppl here believe webcams are evil, and so do I. And this is specially because their light isn't reliable, thus a good spying mechanism.

So I think this option should be totally disabled by default.

But if there's an slight chance you can make sure Instantbird wouldn't be taking photos, or spying on users at any other time, it might help the usability to give user an option to re-enable it. Perhaps with a big flashy warning telling them how bad webcams are, for security.

comment:4 Changed 5 years ago by mrphs

Keywords: security added

comment:5 Changed 5 years ago by sukhbir

Three ways I would like to handle this, in order of preference. Discussions welcome.

  • disable this completely: remove the option to take a picture and disable the backend code.
  • disable this by default: but let the option remain and the user can set it from the advanced preferences if s/he wants to take a picture.
  • enable this: and throw up a big warning when a user will call this.

comment:6 Changed 5 years ago by sukhbir

Resolution: fixed
Status: newclosed

After discussing with Arlo, we are going with the second option. Please feel free to disagree!

comment:7 Changed 12 months ago by traumschule

<+sukhe> hello. yes, I think it's fine to close the tickets. thanks for doing what we should done earlier :)

sad but true:
https://blog.torproject.org/sunsetting-tor-messenger

luckily there are alternatives:
https://blog.torproject.org/tor-heart-onion-messaging

.. and maybe someday

Note: See TracTickets for help on using tickets.