Hacker News new | past | comments | ask | show | jobs | submit login

Can you be more clear? For example I want to make something like video calls and screen-sharing do I do it in Python(or C proprietary) for all platforms then ask my users to install an extension that let's me connect with my application?

I understand where you are coming from and I would also like Firefox not to force on me the PDF reader and other options, if they could have this extra features as plugins that you could as a power users uninstall and use your preferred thing would be nice.

Can you also make more clear why you don't trust someone making a webpage that calls an hardware related API but you trust them if instead of the page is a binary or a python script.




Yeah, I can pull the script down and have something that I know works.

It’s not a security thing, I don’t trust the business people to avoid changing things in a breaking way.


Firefox or Chrome would have control over that hardware related code not the third party software, the software would ask if you have a microphone or not and a popup would/should appear so you can confirm, an evil developer can't go around this.


I know. I’m concerned the application will get changed in between uses. If it’s complex enough that I couldn’t use just screen or a short script I write myself then that means I’m depending on the behavior of a webpage to remain consistent for some process.

I don’t care about security I care about the application written by the device manufacturer (who I trust from a security standpoint) not changing (which it will, because some business/marketing/“UX” guy always comes along and breaks things and I won’t have a way to get the old version of the application that I needed to drive the hardware)

I mean the idea that webpages will want hardware access is concerning and I’m sure a lot of them will ask for it for some reason and that is a security problem but it’s not at all what I’ve been talking about. Maybe try rereading my other replies?


Sorry if I did not understand your example, are you afraid of companies offering a webpage for configuring your printer/drone/device instead of a stand alone application, Then if the site goes down you can't configure your thing?

If this is the case then you are asking to not allow features for the good developers because bad/lazy developers exists.

I have a Canon printer that works fine on Linux but I do not have the GUI executable like on Windows, so one day it did not work anymore, I had no idea what to do so i installed the driver on a Windows VM , let the VM to access the printer and I got a diagnostic (I forgot to open a tray thing). So for this case if the printer devs could make this diagnostic tool as a webpage or Electron app would have helped me a lot (I was lucky I already had a Windows VM)




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: