3 ms·

While I understand the concern about security, I think it is beside the point. The surface attack is effectively the GPU and its driver, not the web renderer. T

While I understand the concern about security, I think it is beside the point. The surface attack is effectively the GPU and its driver, not the web renderer. The technique that are put in place by the web renderer are and were used by game engines. If anything it'll push the GPU makers to have better drivers support. EDIT: As for the no-GPU case, it is an edge-case, in which we could for example switch to the classical renderer. If you're running FF from a VM as your daily driver, there's something not right somewhere I think. (I'm thinking of C&C servers for satellites still running on WinXP and stuff)

btrask 9y ago
> If you're running FF from a VM as your daily driver, there's something not right somewhere I think. I am. QubesOS is a similar setup that runs applications in Xen VMs for security. I think you can do GPU passthrough but it's not recommended. At this point I don't think I would ever go back to running a browser "bare", even if there were no bugs, being able to have complete control over it (e.g. pausing, blocking network access, etc.) is a godsend. I think the idea that "it'll push GPU makers to be secure" is weak. We're so far from that point it's not even on the horizon.