4 ms·

I just hope that WebGL, WASM etc are not going to be abused like JavaScript now is and will be only used for professional applications when you actually need it

• johndough 5y ago
  > I just hope that WebGL, WASM etc are not going to be abused Unfortunately, it is too late for that. For example, 50 % of sites using WASM are using it for crypto mining: https://www.dimva2019.org/wp-content/uploads/sites/31/2019/06/DIMVA19-slides-2-R.pdf https://www.dimva2019.org/wp-content/uploads/sites/31/2019/0... In addition, WebGL is being used for browser fingerprinting. Also, the implementations of both WASM and WebGL are quite complex and thereby greatly increase the attack surface of browsers. Just a few examples for vulnerabilities: https://www.cvedetails.com/vulnerability-list/vendor_id-20412/Webassembly.html https://www.cvedetails.com/vulnerability-list/vendor_id-2041... https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=webgl https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=webgl). https://www.cvedetails.com/cve/CVE-2014-1502/ https://www.cvedetails.com/cve/CVE-2014-1502/
  • ttt0 5y ago
    I'm not talking about this kind of abuse, that's to be expected. What I mean is web developers using it when it's not absolutely necessary. On forums, blogs, news sites, search engines and stuff of that nature. I already have WebGL and WASM disabled, because I simply don't see why should I have it enabled. Don't require me to enable it for no reason is all I'm saying. Probably no one cares, but if you do require it, I'm going to just ignore your website.