Hacker Read

FloatArtifact | karma 822 | avg karma 2.26 · 2021-02-01 00:48:29+00:00

Well that may be true it still is another vector for a identity based on hardware since it's numerated.

madeofpalk | karma 21444 | avg karma 3.75 · 2021-02-01 01:58:39+00:00

I'm not totally enthusiastic for this feature, but that doesn't appear to be the case either.

It looks like navigator.hid.getDevices() will only return devices that the site has previously explicitly requested (with the vendor and other IDs) and the user has granted permission to access.

So it doesn't look like drive-by enumeration is possible with this - websites have to explicitly request to connect to a specific device, and the user must manually approve each device.

reply

FloatArtifact | karma 822 | avg karma 2.26 · 2021-02-01 04:12:15+00:00

Thank you for clarifying! That puts me a little bit more at ease.