Hacker News new | past | comments | ask | show | jobs | submit login

Well, we do know that the best intentions around the browsers technology have paved the way to hell.

Some of the other issues that crop up are:

* Sites "adding" increased security mentions to their customers by profiling their connected bluetooth devices * Is the browser only able to see connected devices and not the master list of devices? * Bluetooth devices come in such a wide array of formats that I wouldn't want to ever offer the browser access to these tech (it's clunky enough through the OS most of the time) Last time I let this site access my devices and now it's watching me * All those other options you listed below in another reply, are all high susceptible to a man in the middle attack, and all the sudden your headphones have been turned into a weapon, all because you clicked a link. * Getting your laptop's battery drained even more because of some nefarious website preventing your devices from sleeping

I feel like we need to build a pretty big moat around USB devices and Bluetooth devices, as they're often the easiest points of entry that can lead to further system compromise.




Notice the prompt to select a device: https://developers.google.com/web/updates/2015/07/interact-w...

I think this mitigates these security concerns and improves security around Bluetooth devices generally.

Today if I want to do use the advanced configuration features of for my headphones I need to download a local application and install it. A local app from has way more unwanted permissions and tracking ability than a website. In the future it could be as simple as visiting their website and clicking allow when the site requests bluetooth access.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: