3 ms·

Accessing device low level capabilities implemented by device driver manufacturer? Exploitable vulnerabilities will probably come in faster than the performanc

• flohofwoe 5y ago
  How to you get that from the blog post? WebGPU doesn't allow direct access to the GPU just as WebGL doesn't, it's just a different programming model which moves more state management into the initialization phase instead of the render loop.
• 542458 5y ago
  I recall seeing similar predictions of terrible security vulnerabilities with the WebGL APIs, but AFAIK we never saw real-world attacks here (other than fingerprinting). Much like JIT or video, it does increase the attack surface significantly and you should turn it off if you’re very security conscious… but it’s not apocalyptic for most users.
  • est 5y ago
    > you should turn it off if you’re very security conscious You can't easily turn it off in Chrome/Blink/Edge Same as WebRTC.
  • krona 5y ago
    It was possible to read framebuffers (via the WebGL API) containing the rendering of other tabs at one point in (if memory serves) Firefox.