probably not the first person with this idea but

[rexo@st.transbus.social]

@cato@chaosfurs.social @reiddragon@fedi.catto.garden boooooo

[reiddragon@fedi.catto.garden]

@rexo @cato great argument

[rexo@st.transbus.social]

@cato@chaosfurs.social @reiddragon@fedi.catto.garden if you want an actual argument then yes I do actually trust a specific scoped permission more than a native app with full access. I suppose you could have everything in Flatpaks with scoped perms but realistically I'm not sure if 1. companies would bother and 2. people would accept that

[rexo@st.transbus.social]

@cato@chaosfurs.social @reiddragon@fedi.catto.garden also that would restrict people to Linux. better than forcing Windows, but ultimately WebUSB is cross platform

[reiddragon@fedi.catto.garden]

@rexo @cato this is the hundredth time I'm saying this just in this thread, but that permissions system doesn't mean jack shit. It's been compromised many times, can be completely bypassed by someone who knows what they're doing, and even if it worked as intended, it doesn't even cover everything, allowing websites to just get direct access to the GPU driver, letting them exploit it willy nilly, with absolutely no permissions in sight

The. Web. Cannot. Be. Trusted. The whole model was made for serving static documents, not applications. But now they shoved applications in the bloody thing and we're supposed to just pretend the whole thing isn't a giant security nightmare

[soph@ice.sophari.org]

@cato
- whats my purpose
= android webview debugging
- oh my god

[cato@chaosfurs.social]

@raccoon Chromium based browsers are afaik the only ones supporting WebUSB because Mozilla refuses to implement it

[urbanclone@infosec.exchange]

@cato seems so niche but it’s so completely me/true