4 ms·

Seems that Mozilla is detached from reality, not only because of this, but they also refuse to implement other APIs like WebUSB providing bizarre claims about s

by zb3 2y ago

Seems that Mozilla is detached from reality, not only because of this, but they also refuse to implement other APIs like WebUSB providing bizarre claims about security at the same time neglecting valid arguments about web apis being safer than native apps..

DrillShopper 2y ago
Why even bother to sandbox the browser if it can scribble all over my USB devices?
- exe34 2y ago
  it can't, you have to pick which device it can use.
  - M95D 2y ago
    I don't remember Windows or Linux providing this kind of security granularity. Or a security prompt such as the one you describe. USB is all-or-nothing.
    - exe34 2y ago
      chrome does. https://miro.medium.com/v2/resize:fit:720/format:webp/0*7Oo4jlofEB_kevHQ.png https://miro.medium.com/v2/resize:fit:720/format:webp/0*7Oo4...
    - rcxdude 2y ago
      No, it's the browser that mediates the access from the websites.
      - DrillShopper 2y ago
        Okay, and what makes sure the browser isn't stepping outside the granted access?
        zb3 2y ago
        The bounty you'd get if you found a way to bypass this.
        exe34 2y ago
        the same thing that makes sure the browser doesn't give them full access to your files. nothing.
      - M95D 2y ago
        Exactly. I don't trust the browser to not report home the list of what I have connected on USB. That information is very valuable for ad companies. I don't want to see popups with "Your external HDD is too old. You may loose data. Buy a new one before it's too late!!!"
meiraleal 2y ago
PWAs