3 ms·
Did you read this? https://wicg.github.io/webusb/#security-and-privacy https://wicg.github.io/webusb/#security-and-privacy Maybe give feedback here? https://gi
by VoxPelli 7y ago
Did you read this? https://wicg.github.io/webusb/#security-and-privacy https://wicg.github.io/webusb/#security-and-privacy
Maybe give feedback here? https://github.com/WICG/webusb/issues/ https://github.com/WICG/webusb/issues/
- BoorishBears 7y agoI did literally last night (what a happy coincidence!) and it gave me a great laugh "We identified the biggest security problem with this, but to get adoption we're going to rely on prompts (which we all know users pay attention to)" Then the next section is: "We know how the previous shortcomings can be exploited to pwn the host too, hosts, don't let yourselves get pwn'd k thnx" What feedback is there to give, they know what's wrong, they just don't care.
- VoxPelli 7y agoLonger related thread: https://github.com/w3ctag/design-reviews/issues/108 https://github.com/w3ctag/design-reviews/issues/108
- BoorishBears 7y agoIsn't that a play by play of exactly what I described?
- nimish 7y agoIt's up to them to prove that WebUSB is secure, not on me to prove it's insecure. Direct hardware access over the web is inherently dangerous. If they have a way of truly sandboxing malicious uses, without entering into permissions request overload (no human is infallible), I'd love to hear it. the "discussed at X f2f" is not filling me with confidence.