HNGlance

Top Best New Show

Generic and Automated Drive-By GPU Cache Attacks from the Browser [pdf]

https://ginerlukas.com/publications/papers/WebGPUAttacks.pdf

by bubblehack3r • 2 years ago

29 1 2 years ago

GI

Related Stories

Loading related stories...

Comments

1

nullifidian• 2 years ago

The simplest and most effective solution against a drive-by attack scenario is, in our opinion, to treat GPU access in the browser as a sensitive resource, like microphone or camera access, that requires permission before use. For WebGL and WebGPU, this is not currently the case (Firefox 114, Chrome 115, Chromium 117). This would also prevent malicious parties from stealthily using local computing resources for, e.g., cryptomining.

Personally, I've been wanting this for a decade or longer. But WebGL/WebGPU is another vector for fingerprinting, and removing it from the available by default set of APIs would also lower the level of adoption, so I doubt they'll allow to hide it behind a permission.

Source preview

ginerlukas.com

HNGlance

© 2024-2026 HN Glance. Story content belongs to its original sources.

Privacy
Terms