2 ms·
WebGL is pretty scary since it's only a thin wrapper around OpenGL. OpenGL drivers tend to run in the kernel, have direct access to the complete memory of the b
by quux 13y ago
WebGL is pretty scary since it's only a thin wrapper around OpenGL. OpenGL drivers tend to run in the kernel, have direct access to the complete memory of the box and not be hardened from a security perspective. It's only a matter of time before someone figures out a way to own a box via WebGL by simply visiting a website. This is why Apple leaves WebGL disabled by default in Safari, and I think Microsoft is hesitant to add support in IE for the same reason.
- gcr 13y agoI agree. There was a recent time - maybe a few months ago - where Linux with nvidia hardware and their binary driver blob would instantly panic the system when I visited a page in firefox that used webGL shaders.
- lern_too_spel 13y agohttp://www.opengl.org/registry/specs/ARB/robustness.txt http://www.opengl.org/registry/specs/ARB/robustness.txt
- TazeTSchnitzel 13y agoWebGL is more secure than OpenGL. It helps a lot that the major browsers don't implement WebGL with OpenGL on Windows. Chrome and Firefox implement it with DirectX.