Hacker News Reader

How long until we get a heartbleed-like attack where some software overruns its GPU buffer into a webgl buffer?

FWIW I've been running with WebGL disabled because of similar concerns.

WebGL works if you enable it? On Linux I've never seen anything other than error messages from WebGL.

WebGL exercises some new corners of the OpenGL interface that many drivers weren't prepared for when WebGL arrived, so browsers tend to have an extensive blacklist: if you have a driver on the list, you won't get WebGL.

On a rolling release like Debian Testing, with well-supported hardware like the Intel Ivy Bridge integrated GPU, WebGL has always worked beautifully.

You can try overriding the blacklist in Chrome, that worked well for me when I needed to for a Debian/Nvidia system a couple years ago.

Ahh, I've been disabling it on Windows, however silly that might be.

Reply on news.ycombinator.com