4 ms·
> There isn't a "Yes allow" prompt, it pops up a list and you have to select something specific. And once hackers figure out a device they can use for attacks,
by mikl 5y ago
> There isn't a "Yes allow" prompt, it pops up a list and you have to select something specific.
And once hackers figure out a device they can use for attacks, they’ll tell the user some nonsense reason why they need to allow access and then pop a dialog for that device and hey presto you have a massive security mess.
I don’t know any concrete exploits, but the theoretical application is not complicated. Any information you can access about the user’s system (like what USB or Bluetooth devices are visible) will be used for fingerprinting purposes, just like they’re already using screen resolution, fonts, canvas tricks, etc.