Microsoft says WebGL browser games are “harmful”
by Michael Arsenault on Tuesday, June 21, 2011 , under
Bad news for open standards browser-based gaming: Microsoft’s has said that it won’t be supporting WebGL now or in the foreseeable future.
The announcement was made via its Technet blog site, under the rather damning headline “WebGL considered harmful”.
The development of WebGL is being managed by The Khronos Group, which is also responsible for OpenGL, OpenCL and so on. WebGL is a cross platform API designed to give your browser access to your graphics card and enable hardware acceleration of JavaScript games.
According to security experts at Microsoft, the problem with WebGL is not so much any existing security holes, but the fact that it gives online programs so much access to the inner workings of your PC. That means interacting with a lot of third party drivers which will make future issues many and hard to spot.
According to security experts at Microsoft, the problem with WebGL is not so much any existing security holes, but the fact that it gives online programs so much access to the inner workings of your PC. That means interacting with a lot of third party drivers which will make future issues many and hard to spot.
“While it may be possible to mitigate these risks to some extent,” says the Technet blog, “The large attack surface exposed by WebGL remains a concern.”
It’s not just Microsoft who thinks WebGL is a problem either. Yesterday, security firm Context Information Security sent us a press release saying that WebGL is a “back-door threat” with elements “not fit for purpose”. They specifically highlight an issue whereby a WebGL app can take a screenshot of the client PC and send oit back to the server. They also point out the current – but soon to be patched – vulnerability in Firefox which allows a WebGL app to execute a DoS attack by opening lots of windows on the desktop. This is the second time Context has spoken out against WebGL.
What Microsoft’s statement means for WebGL at this point isn’t clear. Internet Explorer doesn’t support WebGL right now anyway: presumably this announcement means that Windows Phone and Windows 8′s fancy new HTML5-friendly interface won’t either.
While Microsoft’s argument about third party drivers and unpredictable security holes makes sense, it’s hard not to reason that a single vendor controlling the entire chain of control from server to graphics card undoubtedly benefit said vendor too. While the security concerns are obviously relevant, this also looks like the opening salvo in a similar battle to the OpenGL/DirectX one over a decade ago. That’s a battle less likely to have a clear winner if Microsoft ends up facing off against the likely supporters of cross platform web gaming: Google and Apple. You could probably throw Facebook and Amazon into that too.
Jonathan Hirshon, a spokesperson for Khronos Group, told PC Gamer that browser developers are still working towards full compliance with the WebGL standard.
“All browser vendors are still working toward passing the WebGL conformance suite,” Hirshon said, “Only once they have successfully done so can they claim support.”
Which means that it’s early days for WebGL. While you wait for proper browser support, though, it might be worth taking Context’s main piece of advice and disabling it in your browser settings if you run Chrome or Firefox (the only browsers to support it).
13 comments
-
prisoner art
June 21, 2011 at 3:41 PM
Good post - something to be aware of.
On another, wholly unrelated matter - check out the latwest video I posted - a song by Warrant - is it visible ?
Thanks for your help !
-
Anonymous
June 21, 2011 at 4:50 PM
Don't play webgl games or use Internet Explorer! But I use firefox :D
-
AllenTesch
June 21, 2011 at 5:04 PM
I guess it's nice that they're looking out for people. But they should also know how to protect themselves.
-
Anonymous
June 21, 2011 at 5:33 PM
I never thought about that. I've played a couple things that run on WebGL. I hope they work everything out, it'd be unfortunate if people abandoned WebGL over theoretical scares.
-
Anthony
June 21, 2011 at 10:39 PM
A good browser, a good firewall, and common sense should keep you safe. How unfortuante
-
Jordan
June 22, 2011 at 12:19 PM
Glad to see that Microsoft is calling them out on their program's vulnerabilities, security is a big issue these days.
Popular Posts
-
After displays of socket AM3+ motherboards based on AMD 990FX chipset, by ASUS , and MSI were pictured by various tech sites, it's... -
How powerful does a laptop need to be? It's a pertinent question. Last week Razer unveiled a laptop it proclaimed the "saviour of P... -
This computer above is what my first gaming rig looked like. I became interested in building computers when I was in high school and when I... -
Counter-Strike: Global Offensive trailer reveals cross-platform play, Valve to host official serversThe first trailer for Counter-Strike: Global Offensive has landed on Gametrailers. In between messages mentioning the new weapons, maps and...
-
Steve Jobs believed he'd "cracked the code" on how to build a TV as well as Apple makes phones. Apple is likely to launch i...
About Me
- Michael Arsenault
- Follow my blog as I begin my journey on video game collecting. I will update as often as I can and show you some of my video game finds, from NES to current gen consoles. Thanks for visiting my blog!
June 21, 2011 at 3:21 PM
nice post