WingNews logo WingNews
top | item 33341635

(no title)

laundermaf | 3 years ago

To be fair, you're supposed to get a permission dialog and it seems you have to pick the specific device(s) to connect to them.

https://web.dev/usb/#get-access-to-usb-devices

However I suppose that the mere existence of this API means that there could be a way to bypass the request; The browser already does have full access to every device.

discuss

order

mschuster91|3 years ago

Sweet jesus that's easy. Wonder if stuff like Samsung ODIN (which already has a OSS clone) could be ported to that.

jeroenhd|3 years ago

Definitely possible, especially with native-to-WASM tooling.

I've used a web page to run ADB commands to quickly debloat my phone, so I don't see why fastboot support wouldn't work.

There's even a tool to flash your Android phone through the browser (https://pixelrepair.withgoogle.com/ I believe). Adding "automated LineageOS installer through WebUSB" to my infinitely growing to-do list :)

kevingadd|3 years ago

I believe the device also needs to be WebUSB compatible, unless that part of the design changed - it's a measure to reduce the attack surface by not letting webpages talk to old pre-WebUSB hardware that might have vulnerabilities.

selfhoster11|3 years ago

Web MiniDisc folks ported the reverse-engineered the NetMD protocol tools to JS, and can now upload audio and patch device firmware on any MD device connected via Chrome/Chromium. Porting Odin is likely to be feasible.