Friday, June 17, 2011

Microsoft and Apple worried about WebGL security


 Although a glass ceiling largely stoned due to security holes in its products, Microsoft has positioned itself on Thursday against the standard WebGL claiming precisely the possibility of increasing the security flaws in various devices. If you rely on Microsoft's new standard for hardware acceleration will not be adopted by industry.


'Harmful'. That's how the company defined the WebGL in an article about security. In their explanations, the company says that the products they currently support WebGL hardly have approved based on security requirements from Microsoft.


"Harmful"
For Microsoft, the security of WebGL falls short because it relies on drivers provided by manufacturers, a type of protection "with which they never had to worry about before." Attacks that result would have increased the privileges in using the system, but now could easily allow remote control of equipment.

"We expect to see bugs that only exist in certain platforms or certain video cards potentially facilitating planned attacks."

The company led by Steve Ballmer goes further and says that the lack of a service to ensure protection for the video cards - Windows Update is cited as an example, look - the users could choose to enable WebGL and have a navigation insecure. "Manufacturers usually update their drivers once a year, a reality that is not compatible with the needs of the security update process," even pins.

Pessimistic only, Microsoft believes that the WebGL will be a source of vulnerability are difficult to be corrected. "WebGL is not a technology that Microsoft may endorse the viewpoint of security."

Meanwhile, Apple has confirmed this week that will be accepted in WebGL iOS 5 for 3D graphics acceleration via hardware. However, the resource will be available only to developers of advertising material for the platform iAd. Yeah.