4 ms·
I think their response is very good. Basically Context is claiming that there is a possibility of WebGL being used for kernel level attacks but has not shown an
by nkassis 15y ago
I think their response is very good. Basically Context is claiming that there is a possibility of WebGL being used for kernel level attacks but has not shown any proof. And as for crashing users machines, my boss reported that my app crashed his computer a few times, now he's more careful to save all his work before launching my app ;p But it hasn't happened in a few months now so, I think I fixed it or his browser got updated. :)
- ajross 15y agoThe standard for security mitigation in architecture is now ... proof of exploit? Seriously? This issue is very real. Anyone who has ever done significant 3D work is aware that these drivers crash machines regularly when exercised with edge cases. Those crashes are all kernel exploits waiting to happen.
- windsurfer 15y agoJavascript, IE, and Skype are all very vulnerable to all sorts of security and privacy problems, yet people still leave them on all the time. I'd like to see some exploits first.
- nkassis 15y agoThat's sort of the way I see, yes gfx card drivers are terribly brittle but this is something the card manufacturers need to start looking into. We can't blame this all on the people trying to bring something awesome like WebGL which I think is crucial for the future of things like chromeOS. The browser vendor are aware of the issues and do a lot of checking (at least chrome does) of shaders.
- windsurfer 15y agoChecking is still obviously not the answer, due to the halting problem.