3 ms·
so if I understood it right, Firefox is vulnerable to the problem they wanted to avoid but without giving us WebUSB?
by owebmaster 2y ago
so if I understood it right, Firefox is vulnerable to the problem they wanted to avoid but without giving us WebUSB?
- kevincox 2y agoNo, because the device they are accessing needs to be specifically built for this use case. So you would need to give the user a malicious device then use a malicious webpage. The attack scenario isn't impossible, but is far less then those that are possible with WebUSB.
- contravariant 2y agoWhile not impossible, I just can't think of a good reason why you'd need them to access a malicious webpage when you've already gotten them to install a malicious device.
- fhars 2y agoNo, USB is vulnerable to malicious devices.