Comment on LineageOS now officially supports the Pixel 9 series

• WhyJiffie@sh.itjust.works ⁨5⁩ ⁨days⁩ ago

  there is no way to verify the downloaded package before installation.

  also I generally deem both webusb, and chrome’s broader filesystem access apis dangerous, partly because a vulnerability in the website permission checking code with this permission is much worse than with e.g. the camera.
  but the more realirealistic problem is that its just too easy to grant a random website so deep permissions to your device, either by accident, by habit or because the user does not understand what is happening. just a click or two and you have just granted a ransom website full access to your drive. with webusb, they can even write a bootable anything to your pendrive.

  my concern here is not that you cannot make sure that the graphene website will only do what it needs to, but that the feature exists at all, because of all the other websites. I sincerely bless mozilla for not implementing these.

  source