3 ms·
How badly can you wreck state in bindless? Badly enough to see the pointers of another process or detect a lot of high-detail information on what computer is ru
by shadowgovt 4y ago
How badly can you wreck state in bindless? Badly enough to see the pointers of another process or detect a lot of high-detail information on what computer is running the program?
If so, that'd be a non-starter for a web API. Web APIs have to be, first and foremost, secure and protect the user's anonymity.
- brookst 4y agoAll of this is in the context of a browser. If a misbehaving web app uses pointers for memory from another process, that should be blocked by all of the same things that prevent non-privileged apps from doing the same thing.
- shadowgovt 4y agoAgreed, as long as they sandbox properly (because it's also important that you can't use the API to find out information from another tab).
- dcow 4y ago“The web” should not first and foremost protect anonymity. It should do what humans need it to do ideally while keeping users private and secure. If there’s a concern, my browser should ask me if I’m willing to share potentially sensitive information with a product or service. I fucking hate this weird angsty idea that the web is only designed for anonymous blobs and trolls.
- dist-epoch 4y agoOn Windows GPU memory space is virtualized by the OS, so it has the same kinds of access controls as regular system memory. Linux/Mac also support GPU virtualized memory, but I'm not sure if it's always enabled.