Google Developing Master API — Web Intents

GeneralSecretary writes "Google is developing an API to allow web apps to easily share information with various services. Quoting: 'Android OS addresses this problem with Intents, a facility for late run-time binding between components in the same or different applications. In the Intents system, the client application requests a generic action, e.g. share, and specifies the data to pass to the selected service application. The user is given a list of applications which have registered that they can handle the requested intent. The user-selected application is created in a new context and passed the data sent from the client, the format of which is predefined for each specific intent type. We are hard at work designing an analogous system for the web: Web Intents. This web platform API will provide the same benefits of Android Intents, but better suited for web application. ... As with Android, Web Intents documents an initial set of intent actions (edit, view, share, etc.) that likely cover the majority of use cases on the web today; however, as the web grows and sites provide more functionality, new intent actions will be added by services that document these intents, some more popular than others. To foster development and use of intents, we plan to create a site to browse existing intents and add new intents.'"

Let me know if I'm wrong...

[TubeSteak]

Google seems to be proposing a bit of javascript that anyone can add to their website,
which will pull my data from any other enabled website I've stored information on?

Why does this just seem like another entry point for abuse?

Re:Let me know if I'm wrong...

[Pollardito]

AFAIK Android intents are push rather than pull. And that's a pretty big difference, since you have to either select the app/site you're pushing to at the time of the push or preset it beforehand (meaning you have control of who's receiving the data). This looks like it has a return path though, so it does seem like it might be risky.