Hacker News new | ask | show | jobs
by pjc50 2927 days ago
What does NaCL have to do with this, it's a cryptography library?

The issue is that 99.99% of USB devices aren't designed with the possibility of hostile payloads coming from the host, so the security rests entirely on the webusb permission dialog. Which should be presented as "grant this website administrative access to your computer" but isn't.
2 comments
rrix2 2927 days ago
> What does NaCL have to do with this, it's a cryptography library?

The other NaCl https://developer.chrome.com/native-client

link
anfedorov 2925 days ago
Could the browser create a tight whitelist of payloads that are definitely not hostile, then expand it slowly to add functionality?
link