News for hackers. Stuff that matters.
Re:WebUSB API: draft spec to safely expose USB device servic... by chatmasta on Sunday April 10, 2016 @01:26PM (#11467170)
If you want to connect a USB device to the cloud, that's great. All you need is a usb<->socks proxy running on your local machine, tunneling USB traffic to the remote server.

Why should we build this functionality into the browser? Is it really that much more convenient than installing an app to run the proxy?

The use case you describe is sufficiently rare, that if you need it, downloading an app should not be a high cost to pay. If only 1% of browser users need this USB proxy, why expose an additional attack surface for the 99% who do not need it?

Re:WebUSB API: draft spec to safely expose USB device servic... by Natanael_L on Sunday April 10, 2016 @01:47PM (#11467297)
I'm thinking of HTML5 media tags. There's a standard way to specify that something is a piece of media to play, but the browser needs to also have the right codec for that media.

There could be something similar for USB, where there might not even be any "codecs" (drivers) included by default in browsers, but where there's a defined method of making USB devices available.

You'd still have to install a plugin for each device type that your browser doesn't natively understand, but standardization for how to make specific device types available to the browser would be much simpler. And there could be "rewriting proxy" drivers available for improved security which limits what requests that are possible, preventing most hardware exploits.

Although this might still be too much work for little gain.

Re:WebUSB API: draft spec to safely expose USB device servic... by chatmasta on Sunday April 10, 2016 @02:28PM (#11467468)
If you need to install a plugin, why not install an app? Presumably plugins will need to be written for each different browser, just as apps need to be written for each different OS. So there would be very little gain.
Re:WebUSB API: draft spec to safely expose USB device servic... by awalton on Sunday April 10, 2016 @06:17PM (#11468440)
> Why should we build this functionality into the browser? Is it really that much more convenient than installing an app to run the proxy?

Apparently it is, given how highly requested of a feature it is to have everything you could do with VMRC available through the web browser with no plugins or local software.

Again, I still don't think it's a good idea either, but I also don't like a lot of the crazy shit built into modern web browsers for maybe the 1% users, like the mentioned WebMIDI.