logoalt Hacker News

herodoturtle • today at 2:58 PM • 4 replies • view on HN

When you go to enable "Unsafe WebGPU Support" it says the following:

"Convenience flag for WebGPU development. Enables best-effort WebGPU support on unsupported configurations and more! Note that this flag could expose security issues to websites so only use it for your own development."

Can someone who knows about this stuff please guide us in terms of what sort of security risk we would would be exposing ourselves to?

Thanks.


Replies

William_BB • today at 3:41 PM

> Also FYI for people on Linux, you need to enable unsafe WebGPU features for this to work.

Browsers on macOS do not require you to enable this feature. Does it mean it's on by default?!

➕ show 1 reply
iugtmkbdfil834 • today at 3:06 PM

I was gonna respond with the generic large swath of unverified code running on your machine, but I realized your question is more specific and more interesting. If anyone knows, I would love to hear an answer on this as well.

moron4hire • today at 3:15 PM

Being new, largely untested code paths in the browser, it's very possible for it to have buffer overflow defects that could be exploited to execute arbitrary code on your system. So, basically, literally anything could happen.

learntoplaypitc • today at 3:24 PM

[flagged]