WebGL Poses New Security Problems

Julie188 writes "Researchers are warning that the WebGL standard undermines existing operating system security protections and offers up new attack surfaces. To enable rendering of demanding 3D animations, WebGL allows web sites to execute shader code directly on a system's graphics card. This can allow an attacker to exploit security vulnerabilities in the graphics card driver and even inject malicious code onto the system."

Comments

Really?

[internerdj]

I mean what could possibly be dangerous about allowing random websites to run hardware level code?

With record-setting speed and efficiency!

[jeffb (2.718)]

You can dedicate hundreds of threads to high-volume malware, while freeing up your CPU to maintain a smooth phishing experience!

Re:Glad I'm not using Binary Blob drivers

[Anonymous Coward]

probably why he feels more secure!