3 ms·
> WebGL is half-assed in safari because of "security" risks, ... Not commenting on anything in the latter clause of your sentence, but I can tell you the secur
by achierius 2y ago
> WebGL is half-assed in safari because of "security" risks, ...
Not commenting on anything in the latter clause of your sentence, but I can tell you the security risks are very, very real. Having worked on GPU architecture as well as a browser engine -- so, so many features/guardrails/guarantees that we take for granted on desktop PCs are basically in their infancy when you look over at the GPU world. Address-space isolation, virtualization of hardware resources, separation of virtual machines, privilege isolation -- when you go to the GPU, all of that is kinda-there if you're on newer hardware, but even then without anywhere near the level of coverage or battle-testing that modern CPUs & kernels have. For example, Pascal (i.e. that old 1060 your friend is still using in their kid's desktop) doesn't even have per-process memory isolation -- a buffer overflow in your browser engine could attack any GPU process on your machine! Even the vendors themselves won't claim to support "proper" secure multi-tenancy until the Hopper era, and again -- even that's much less well-tested than the CPU-level isolation that browsers normally rely on. Consider how much of a security impact PPO/site-isolation has had: so many attacks that used to be possible (e.g. your password being stolen off of your banking site by a malicious ad in the sidebar) are now essentially impossible. That only works because of the deep strength and reliability of address-space separation in modern hardware platforms.
So to take code written by random people on the internet, in a dynamic language, JIT compile it, and then give it access to your GPU -- well, I hope you can understand why that might put the security people on edge. Again, I don't mean to dismiss the rest of your comment, but I want to clarify that when it comes to punching holes in the browser sandbox, the security concerns are really very real.