this post was submitted on 01 Jun 2024
1061 points (98.6% liked)

Technology

58303 readers
11 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
 

Reminder to switch browsers if you haven't already!


  • Google Chrome is starting to phase out older, more capable ad blocking extensions in favor of the more limited Manifest V3 system.
  • The Manifest V3 system has been criticized by groups like the Electronic Frontier Foundation for restricting the capabilities of web extensions.
  • Google has made concessions to Manifest V3, but limitations on content filtering remain a source of skepticism and concern.
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 1 points 5 months ago (2 children)

"WebUSB is a JavaScript application programming interface specification for securely providing access to USB devices from web applications"

Holy Hannah, NO!!!!

Might as well allow a website to direct write to your hard drive unprompted again.

Does noone see how BAD this stuff is?

Stop creating attack vectors with glowing neon signs on them.

[–] [email protected] 4 points 5 months ago

Except it's a very good thing for 2FA USB keys which prevent people from gaining access unless they have physical access to the key. Also useful for USB gamepads etc

[–] [email protected] 2 points 5 months ago (1 children)

Web engines are nearly OSs at this point. It's aready possible to flash a phone ROM in two clicks with a webpage. Most apps are also already rendered in browser engines anyway, that includes things like steam. The APIs might sound evil until your favorite FOSS project uses them to make your life better.

Unfortunately, if Mozilla refuses to implement stuff like PWAs or advanced APIs it's locked out of that side of innovation both good and bad.

[–] [email protected] 1 points 5 months ago (1 children)

It's aready possible to flash a phone ROM in two clicks

That's precisely the kind of access that a web browser should NEVER, EVER have.

If you think 2 stage download keylogger apps getting into app stores is bad, wait until it can be done with a banner ad. Or by viewing a comment on a post.

[–] [email protected] 1 points 5 months ago* (last edited 5 months ago)

You have to specifically permit it on a per site basis, it's not like a website has those permissions by default. If a banner ad or forum post could enable that permission then they'd be able to access your camera as well as a plethora of other permissions?

I don't see any difference between downloading code to run in a web browser vs downloading and running ADB. In fact, running software in a web browser is more sandboxed and with more fine tuned permissions.