Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

While I would like to be dazzled buy new features to me the strikes a real privacy concern without proper permissions.


The user has to choose the device to connect via a browser pop-up.


Well that may be true it still is another vector for a identity based on hardware since it's numerated.


I'm not totally enthusiastic for this feature, but that doesn't appear to be the case either.

It looks like navigator.hid.getDevices() will only return devices that the site has previously explicitly requested (with the vendor and other IDs) and the user has granted permission to access.

So it doesn't look like drive-by enumeration is possible with this - websites have to explicitly request to connect to a specific device, and the user must manually approve each device.


Thank you for clarifying! That puts me a little bit more at ease.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: