News for hackers. Stuff that matters.

A comment on What are some interesting uses of WebUSB you have come across?. Parent comment

Re:What are some interesting uses of WebUSB you have come ac... by ocdtrekkie on Sunday January 29, 2023 @08:39PM (#34574850)
That is a trivial phishing path. In fact, the phishing site could easily justify that process as being required for security! "We need access to your YubiKey to use it to sign you in" seems extremely plausible.
[ Parent | on HN ]
Re:What are some interesting uses of WebUSB you have come ac... by taviso on Sunday January 29, 2023 @11:40PM (#34575824)
It's literally impossible, because U2F devices are not permitted with Web USB.

I personally think it's no more plausible than "Your USB firmware is outdated, please run this updated to continue logging in". Malicious sites do regularly pretend to require software updates and ask you to install them. That can still and does bypass U2F today, and actually happens in the wild.

[ Parent | on HN ]