3 ms·

This is actually pretty exciting. I can see being able to plug in to an arbitrary computer and visit https://www.yourdevicemanufacturer.com/ https://www.yourdev

by nly 11y ago

This is actually pretty exciting. I can see being able to plug in to an arbitrary computer and visit https://www.yourdevicemanufacturer.com/ https://www.yourdevicemanufacturer.com/ to manage your personal devices really taking off. No drivers or shitty apps to install or update? This will be huge. I can see why people would be concerned about attack surface, but if you're plugging your devices in to foreign USB ports, then you're potentially 0wned already. At least this way, if it's done right with regard to permissions, the driver side will always be up to date. Plus Javascript is memory-safe. Holy freakin ghost though, this should be HTTPS only.

imtringued 11y ago
The problem is that every website you give USB access to can keylog anything you type. Nobody here cares about foreign ports or whatever. I can already use all my three USB devices (mouse, keyboard, flash drive) in conjunction with websites. Where is the supposed utility? Beyond some niches like connecting an arduino and a gamepad I can't see this being useful.
- sillysaurus3 11y ago
  The spec is explicitly not for keyboards: Standard device classes include keyboard, mice, audio, video and storage devices. Operating systems support such devices using the "class driver" provided by the OS vendor. There is however a long tail of devices that do not fit into one of the standardized device classes. These devices require hardware vendors to write native drivers and SDKs in order for developers to take advantage of them and this native code prevents these devices from being used by the web.
  - weddpros 11y ago
    Seriously? What they really want is Javascript device drivers? Like so many things USB, it will be half baked at best... USB couldn't even design a proper connector, had data rates (USB2) 4x below specs, etc. I wouldn't trust them to guarantee any level of security... Also, USB's main argument has always been "yes but it's cheap"

by nly 11y ago

imtringued 11y ago

The problem is that every website you give USB access to can keylog anything you type. Nobody here cares about foreign ports or whatever. I can already use all my three USB devices (mouse, keyboard, flash drive) in conjunction with websites. Where is the supposed utility? Beyond some niches like connecting an arduino and a gamepad I can't see this being useful.

sillysaurus3 11y ago
The spec is explicitly not for keyboards: Standard device classes include keyboard, mice, audio, video and storage devices. Operating systems support such devices using the "class driver" provided by the OS vendor. There is however a long tail of devices that do not fit into one of the standardized device classes. These devices require hardware vendors to write native drivers and SDKs in order for developers to take advantage of them and this native code prevents these devices from being used by the web.
- weddpros 11y ago
  Seriously? What they really want is Javascript device drivers? Like so many things USB, it will be half baked at best... USB couldn't even design a proper connector, had data rates (USB2) 4x below specs, etc. I wouldn't trust them to guarantee any level of security... Also, USB's main argument has always been "yes but it's cheap"