3 ms·
If websites can run compute shaders on my hardware, that's not a sandbox.
by stackghost 2y ago
If websites can run compute shaders on my hardware, that's not a sandbox.
- tedunangst 2y agoIf websites can run JavaScript on your hardware, is that not sandboxed?
- crazygringo 2y agoSandboxing is about preventing code from accessing data it's not supposed to. Data like files or memory belonging to other tabs or other processes. Or data streams like your webcam or microphone. Data outside of its, well, sandbox. So how are compute shaders accessing data they're not supposed to? How do you think they're escaping the sandbox?
- do_not_redeem 2y agoIt seems like you're just making up your own definitions now because you don't like the tech. What do think a sandbox is, exactly? And what do you think Chrome's GPU sandbox does, if it's not a sandbox?
- jillyboel 2y agodo you have a proof of concept that uses webgpu shaders to extract sensitive data?
- stackghost 2y agoThe search term you're looking for is "monero miner"
- jillyboel 2y agothis exfiltrates data somehow? looking forward to the poc