News for hackers. Stuff that matters.

A comment on Using Web Bluetooth to Communicate with Bluetooth Devices. Parent comment

Re:Using Web Bluetooth to Communicate with Bluetooth Devices by josteink on Wednesday October 23, 2019 @10:15AM (#21334827)
> No. But I wouldn't grant a "random" website hardware access either.

We’ve trained people unskilled in IT that’s apps are dangerous and websites are safer. They’ve finally gotten it.

So let’s make websites unsafe, only one click away (which we know users will click)! What a great idea!

[ Parent | on HN ]
Re:Using Web Bluetooth to Communicate with Bluetooth Devices by Ajedi32 on Wednesday October 23, 2019 @10:25AM (#21334926)
Sounds like your only objection is over how scary-looking the prompt is?

Running a downloaded executable is already "one click away", and connecting a website to a Bluetooth device isn't nearly as dangerous as running an executable. The difference in levels of access and size of the exposed attack surface is huge.

[ Parent | on HN ]
Re:Using Web Bluetooth to Communicate with Bluetooth Devices by josteink on Wednesday October 23, 2019 @10:33AM (#21335009)
It’s all baby steps.

WebDRM: subvert control of the machine from the user.

WebUSB: allow browser-based attacks on physically connected hardware.

WebBLE: allow browser-based attacks on wirelessly connected gadgets too!

What’s next? WebDMA? WebFdisk?

[ Parent | on HN ]
Re:Using Web Bluetooth to Communicate with Bluetooth Devices by CamperBob2 on Wednesday October 23, 2019 @03:35PM (#21338038)
Sorry, but an industry that constrains progress to keep up with its slowest users isn't what I signed up for.
[ Parent | on HN ]