2 ms·
It's not implemented by them because they refuse to implement it. Apple for obvious reasons, but Mozilla's stance disappoints me.
by zb3 1y ago
It's not implemented by them because they refuse to implement it. Apple for obvious reasons, but Mozilla's stance disappoints me.
- yjftsjthsd-h 1y agoRegardless of reasons, it's a bit rich to call something a "standard" when only one vendor implements it. > Apple for obvious reasons, but Mozilla's stance disappoints me. AFAICT, both of them correctly point out that it's a huge privacy and security attack surface. Per https://mozilla.github.io/standards-positions/ https://mozilla.github.io/standards-positions/ - > Because many USB devices are not designed to handle potentially-malicious interactions over the USB protocols and because those devices can have significant effects on the computer they're connected to, we believe that the security risks of exposing USB devices to the Web are too broad to risk exposing users to them or to explain properly to end users to obtain meaningful informed consent. It also poses risks that sites could use USB device identity or data stored on USB devices as tracking identifiers. And I can't see any reason to disagree with that.