News for hackers. Stuff that matters.

A comment on WebUSB API: draft spec to safely expose USB device services to the web. Parent comment

Re:WebUSB API: draft spec to safely expose USB device servic... by creshal on Sunday April 10, 2016 @12:34PM (#11466884)
APIs to access HSMs exist already, though – PKCS11 and friends. And HSMs are designed to deal with accesses questionable sources, so if you wanted to improve their accessibility with a HSM-specific standard, it'd be not much of a headache.

All other bazillion USB devices ever made are not designed to deal with security, and exposing them over the internet will blow up spectacularly.

[ Parent | on HN ]
Re:WebUSB API: draft spec to safely expose USB device servic... by icebraining on Sunday April 10, 2016 @01:00PM (#11467029)
All other bazillion USB devices ever made are not designed to deal with security, and exposing them over the internet will blow up spectacularly.

Which is why the devices have to announce they support WebUSB to be exposed to any web apps, and can even restrict their usage to specific domains.

[ Parent | on HN ]
Re:WebUSB API: draft spec to safely expose USB device servic... by monocasa on Monday April 11, 2016 @11:07AM (#11471991)
> and can even restrict their usage to specific domains

Because there's no such thing as a XSS attack?

[ Parent | on HN ]