"We don't believe that user consent is adequate protection for anything that provides this level of capability. Serial access is a relic from an age where a physical connection conferred a great deal of trust."
"Many devices offer administrative control to anything that connects over this interface without any form of authentication; in my experience, this often extends to privileges that transcend even what a root user can do."
"Mozilla was asked to reconsider its position and Firefox CTO Bobby Holley responded positively, indicating openness to shipping WebSerial using the same add-on-gating mechanism as WebMIDI."
Firefox has introduced support for the Web Serial API in its Nightly version, enabling direct communication with devices like 3D printers and microcontrollers. This feature allows browsers to interact with devices via serial ports, including those emulating serial ports over USB or Bluetooth. Mozilla initially opposed Web Serial due to safety concerns but has since reconsidered its stance. By 2024, Mozilla plans to implement Web Serial with a consent mechanism similar to WebMIDI, while still opposing WebUSB for security reasons.
Read at Theregister
Unable to calculate read time
Collection
[
|
...
]