On: Undocumented backdoor found in Bluetooth chip used by a billion devices

[sitkack]

If it is USB, you should be able to do it directly in JS via Chrome.

[iracigt → sitkack]

WebUSB requires the device to opt in via it's USB descriptors. Otherwise any USB device with firmware updates would have this problem.

Maybe an issue here is WebSerial, as HCI comes over a serial port device. I believe the OS should block access to the serial device once the host driver takes it as a Bluetooth adapter though.

[monocasa → iracigt]

> WebUSB requires the device to opt in via it's USB descriptors.

IIRC, that restriction was removed.