4 ms·

The user has to choose the device to connect via a browser pop-up.

• FloatArtifact 6y ago
  Well that may be true it still is another vector for a identity based on hardware since it's numerated.
  • madeofpalk 6y ago
    I'm not totally enthusiastic for this feature, but that doesn't appear to be the case either. It looks like navigator.hid.getDevices() will only return devices that the site has previously explicitly requested (with the vendor and other IDs) and the user has granted permission to access. So it doesn't look like drive-by enumeration is possible with this - websites have to explicitly request to connect to a specific device, and the user must manually approve each device.
    • FloatArtifact 6y ago
      Thank you for clarifying! That puts me a little bit more at ease.