News for hackers. Stuff that matters.

A comment on Using Web Bluetooth to Communicate with Bluetooth Devices. Parent comment

Re:Using Web Bluetooth to Communicate with Bluetooth Devices by josteink on Wednesday October 23, 2019 @10:08AM (#21334752)
> 1) Prompt the user to download a native app. 2) Prompt the user to follow a link to an app store for their OS. 3) Prompt the user to allow the website access to the Web USB / Web Bluetooth APIs.

99.9999999999999999% of the websites out there doesn’t or shouldn’t need HW-access.

100% of the malicious websites out there will use this the second it lands. That’s one line of code to land seriously serious exploits.

Before their only option was your 1, 2, 3 steps above.

Clearly this is a quantum leap forward, for malicious sites first and foremost.

The rest of the web isn’t going to give a fuck.

So why are we investing in this?

[ Parent | on HN ]
Re:Using Web Bluetooth to Communicate with Bluetooth Devices by staticvar on Wednesday October 23, 2019 @12:11PM (#21336051)
> 99.9999999999999999% of the websites out there doesn’t or shouldn’t need HW-access. 100% of the malicious websites out there will use this the second it lands. That’s one line of code to land seriously serious exploits.

The same can be said for native apps. Are you in the "no Bluetooth/no USB ever" camp? That's totally fair if you are.

[ Parent | on HN ]