On Wed, May 18, 2016 at 6:26 PM, Langer, Steve <[email protected]> wrote:

> Why is it OK to send X11 2D graphics commands across the network using the
> X11 protocol and a security risk to send OpenGL commands across the
> network using the X11 protocol?
>

Hardware OpenGL rendering is already a source of security holes; the driver
vendors make no attempt to be secure. Since the driver vendors won't fix
their crap (just try making NVidia secure their Linux GPU driver!), there
aren't many options.

(It's also kinda shocking how many modern browser exploits involve finding
cracks in the GPU accelerator process/thread. That is partly unrelated
though, as I understand it.)

-- 
brandon s allbery kf8nh                               sine nomine associates
[email protected]                                  [email protected]
unix, openafs, kerberos, infrastructure, xmonad        http://sinenomine.net
 _______________________________________________
Do not post admin requests to the list. They will be ignored.
X11-users mailing list      ([email protected])
Help/Unsubscribe/Update your Subscription: 
https://lists.apple.com/mailman/options/x11-users/archive%40mail-archive.com

This email sent to [email protected]

Reply via email to