dr.-ing. ⁡jaseg on Nostr: nprofile1q…ge85r I had a look at WebUSB when it was first proposed a few years ago ...

nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqhyfapms49gyc4zmsdjcqk0m8nk06d2fh4g7tc66e7k0dev9xth7qege85r (nprofile…e85r) I had a look at WebUSB when it was first proposed a few years ago and I found it has some really bad security implicat that can’t easily be solved in today’s device ecosystem. It basically provides an easy bypass of the whole security stack since USB devices generally do not authenticate firmware updates, while the OS generally trusts USB devices.