Microsoft says WebGL isn't secure enough

[J65nko]

From http://www.h-online.com/security/new...h-1262818.html

In the spirit of the famous articlePDF by Edsger Dijkstra, Microsoft says, in a piece entitled "WebGL considered harmful", that the 3D technology is not secure enough for its products. The blog post lists three reasons for this conclusion: first, browser support for WebGL gives web applications direct access to hardware; second, there could be security flaws in third-party software (such as in graphics drivers); and finally, Microsoft says that operating systems do not currently offer any protection against denial-of-service attacks on graphics cards.

[rocket357]

It's got to be pretty insecure for Microsoft to pick on it. I mean, until they enhance it with their own insecurities...

[BSDfan666]

Hmm, they must have acquired a security expert recently.. better late than never.

[comet--berkeley]

Originally Posted by BSDfan666

Hmm, they must have acquired a security expert recently.. better late than never.

Is Microsoft worried about our security?

The announcement might have to do with the fact that WebGL is supported by Microsoft Explorer's competition:
Mozilla Firefox, Google Chrome, Opera and Apple Safari

Here is an article from The Register:

Firefox web 3D engine fosters image theft bug


But to be fair, security holes do need to be plugged.

[IdOp]

Originally Posted by Microsoft

there could be security flaws in third-party software (such as in graphics drivers)

Gee. Are there any major desktop operating systems that use third-party graphics drivers? :?

[Ninguem]

What were the results on BSD and Linux?

[thirdm]

Originally Posted by BSDfan666

Hmm, they must have acquired a security expert recently.. better late than never.

Not so related to their mainstream products I'd guess, but...

push
http://www.zdnet.com/blog/microsoft/...ri-effort/2463

pop
http://www.zdnet.com/blog/microsoft/...microsoft/5620

[drhowarddrfine]

Microsoft always, always holds back the web and is years behind modern standards and practices.
WebGL security and Microsoft BS
But you knew that.

[CyberJet]

Good Morning,

Glad to hear the news and all your great comments!

[rocket357]

Originally Posted by drhowarddrfine

WebGL security and Microsoft BS

Interesting read. I wasn't aware that Microsoft was developing Silverlight to have GPU access (I figured they'd fallen behind as usual, to be honest)...that fact makes the situation even more laughable.

Vendor lock-in ftw.