Comment on LineageOS now officially supports the Pixel 9 series

ouch@lemmy.world ⁨1⁩ ⁨month⁩ ago

• WhyJiffie@sh.itjust.works ⁨1⁩ ⁨month⁩ ago

  that’s not a feature of the ROM. that’s a tool provided by ROM maintainers. that being said, it almost certainly supports it, as in in someone makes a website that does that, it will be possible.

  now, don’t get me started on how bad of an idea it is to use webusb

  source

  • Emerald@lemmy.world ⁨1⁩ ⁨month⁩ ago

    don’t get me started on how bad of an idea it is to use webusb

    I will get you started. Please explain.

    source

    • WhyJiffie@sh.itjust.works ⁨1⁩ ⁨month⁩ ago

      there is no way to verify the downloaded package before installation.

      also I generally deem both webusb, and chrome’s broader filesystem access apis dangerous, partly because a vulnerability in the website permission checking code with this permission is much worse than with e.g. the camera.
      but the more realirealistic problem is that its just too easy to grant a random website so deep permissions to your device, either by accident, by habit or because the user does not understand what is happening. just a click or two and you have just granted a ransom website full access to your drive. with webusb, they can even write a bootable anything to your pendrive.

      my concern here is not that you cannot make sure that the graphene website will only do what it needs to, but that the feature exists at all, because of all the other websites. I sincerely bless mozilla for not implementing these.

      source