Re:Using Web Bluetooth to Communicate with Bluetooth Devices
by josteink on Wednesday October 23, 2019 @10:33AM
(#21335009)
It’s all baby steps.
WebDRM: subvert control of the machine from the user.
WebUSB: allow browser-based attacks on physically connected hardware.
WebBLE: allow browser-based attacks on wirelessly connected gadgets too!
What’s next? WebDMA? WebFdisk?
Running a downloaded executable is already "one click away", and connecting a website to a Bluetooth device isn't nearly as dangerous as running an executable. The difference in levels of access and size of the exposed attack surface is huge.