3 ms·
Isn't GPU access from JavaScript supposed to be a feature, not a bug?
by pclmulqdq 3y ago
Isn't GPU access from JavaScript supposed to be a feature, not a bug?
- eptcyka 3y agoThe feature part of it is to allow JS code in a browser sandbox to compute stuff faster. Possibly even render it. The explicit anti-feature is the ability to do yet another side-channel attack. Also out-of-spec is the incredibly power-inefficient IPC mechanism. And I doubt a probabilistic querying of what kind of code the rest of the system is running was ever part of the spec either.
- pclmulqdq 3y agoI intended that to be sarcasm about how unimpressive this particular vulnerability is compared to how it's presented.