3 ms·

> We realized this is not limited to U2F / FIDO and developed a generic proxy that allows to forward any USB device exposed to WebUSB to a remote system. ~sigh

by pdkl95 8y ago

> We realized this is not limited to U2F / FIDO and developed a generic proxy that allows to forward any USB device exposed to WebUSB to a remote system. ~sigh~ It's really depressing to learn that reality was much worst than any of my "this is going to end badly" predictions[1]. I originally thought[2] the problems would start on the hardware side with devices that were never designed for security. Forwarding everything with a proxy is shockingly worse. [1] https://news.ycombinator.com/item?id=11466197 https://news.ycombinator.com/item?id=11466197 [2] https://news.ycombinator.com/item?id=11466415 https://news.ycombinator.com/item?id=11466415

anfedorov 8y ago
Aside from the "no HID" (does a YK even count as a HID if you turn off the default slot 1 functionality?), was the proxy designed to have a firewall / sandboxing of some sort? Google engineers have done some incredible things and while ambitious, it seems this kind of thing is well within their reach.