Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Have been informed by PC.Autority to turn off WEBGL.? it can be unsafe .?

  • No replies
  • 3 have this problem
  • 14 views
Walter
Walter
more options

Firefox and Chrome users are being warned to turn off a 3D rendering tool in their browsers following "significant" security problems.Part of the HTML5 Canvas functionality, WebGL is a rendering engine that allows 3D images and animations without plugins. It is used in the latest versions of Chrome and Firefox, as well as the newest builds of Safari.

Security firm Context warned that the specification is "inherently insecure".

“The risks stem from the fact that most graphics cards and drivers have not been written with security in mind so that the interface (API) they expose assumes that the applications are trusted,” says Michael Jordon, research and development Manager at Context.

“While this may be true for local applications, the use of WebGL-enabled browser-based applications with certain graphics cards now poses serious threats from breaking the cross-domain security principle to denial-of-service attacks, potentially leading to full exploitation of a user’s machine.”

Those concerns with WebGL have been backed by the US Computer Emergency Readiness Team (CERT), the federal government's cybersecurity advisor. US CERT warned that WebGL contains "multiple significant security issues", and advised users to turn it off.

"The impact of these issues includes arbitrary code execution, denial-of-service, and cross-domain attacks," US CERT said, warning users to "disable WebGL to help mitigate the risks". How to turn off WebGL

Here's how to turn off WebGL (thanks to TechDows for the instructions).

In Chrome: 

   right click on the Chrome shortcut

   click properties

   type -disable-webgl into the target field after the Chrome.exe line (...chrome.exe -disable-webgl)

   click apply


How to turn off WebGL in Firefox 4: 

   type "about:config" into the address bar

   agree to the "here be dragons" warning message

   type "webgl" into the Filter field

   double click "webgl.disable" so the value changes to "true"

   retstart the browser

We're still waiting on confirmation from Google and Mozilla on whether disabling WebGL in these ways will be sufficient protection.

This article originally appeared at pcpro.co.uk 3 comments in this discussion "It was enabled in my browser peter. Not any longer of course." By Slatts

Related Articles 

   7 browser alternatives to Internet Explorer
   Norton AntiVirus, Internet Security 2012 released to public beta
    
   Internet Explorer 9 officially launched
    
   Top 10 worst Microsoft products of all time

Latest News 

   Video preview: the June iPad edition of PC & Tech Authority
    
   Panasonic's new DMC-G3 camera arrives
    
   FetchTV now available on Internode
    
   Taliban joins the Twitter party

0digg Copyright © PC Pro, Dennis Publishing

Firefox and Chrome users are being warned to turn off a 3D rendering tool in their browsers following "significant" security problems.Part of the HTML5 Canvas functionality, WebGL is a rendering engine that allows 3D images and animations without plugins. It is used in the latest versions of Chrome and Firefox, as well as the newest builds of Safari. Security firm Context warned that the specification is "inherently insecure". “The risks stem from the fact that most graphics cards and drivers have not been written with security in mind so that the interface (API) they expose assumes that the applications are trusted,” says Michael Jordon, research and development Manager at Context. “While this may be true for local applications, the use of WebGL-enabled browser-based applications with certain graphics cards now poses serious threats from breaking the cross-domain security principle to denial-of-service attacks, potentially leading to full exploitation of a user’s machine.” Those concerns with WebGL have been backed by the US Computer Emergency Readiness Team (CERT), the federal government's cybersecurity advisor. US CERT warned that WebGL contains "multiple significant security issues", and advised users to turn it off. "The impact of these issues includes arbitrary code execution, denial-of-service, and cross-domain attacks," US CERT said, warning users to "disable WebGL to help mitigate the risks". How to turn off WebGL Here's how to turn off WebGL (thanks to TechDows for the instructions). In Chrome: right click on the Chrome shortcut click properties type -disable-webgl into the target field after the Chrome.exe line (...chrome.exe -disable-webgl) click apply How to turn off WebGL in Firefox 4: type "about:config" into the address bar agree to the "here be dragons" warning message type "webgl" into the Filter field double click "webgl.disable" so the value changes to "true" retstart the browser We're still waiting on confirmation from Google and Mozilla on whether disabling WebGL in these ways will be sufficient protection. This article originally appeared at pcpro.co.uk 3 comments in this discussion "It was enabled in my browser peter. Not any longer of course." By Slatts Related Articles 7 browser alternatives to Internet Explorer Norton AntiVirus, Internet Security 2012 released to public beta Internet Explorer 9 officially launched Top 10 worst Microsoft products of all time Latest News Video preview: the June iPad edition of PC & Tech Authority Panasonic's new DMC-G3 camera arrives FetchTV now available on Internode Taliban joins the Twitter party 0digg Copyright © PC Pro, Dennis Publishing