Re: [webkit-dev] Implementing OffscreenCanvas

2019-10-17 Thread Chris Lord
On 2019-10-17 16:23, Chris Lord wrote: > So I was just looking at adding a setting, but looks like it's already > behind a runtime-setting that's controlled by the experimental-features > flag, so I guess we're ok as it is? After discussing with Zan, we decided the best thing to do was to

Re: [webkit-dev] Implementing OffscreenCanvas

2019-10-17 Thread Chris Lord
On 2019-10-11 12:13, Ryosuke Niwa wrote: > On Fri, Oct 11, 2019 at 2:09 AM Chris Lord wrote: > >> On 2019-10-10 23:15, Ryosuke Niwa wrote: >>> On Thu, Oct 10, 2019 at 2:07 PM Myles C. Maxfield >>> wrote: >>> > On Oct 10, 2019, at 12:57 PM, Ryosuke Niwa > wrote: > > Hi Chris,

Re: [webkit-dev] Implementing OffscreenCanvas

2019-10-11 Thread Carlos Alberto Lopez Perez
On 11/10/2019 11:09, Chris Lord wrote: > This sounds good to me, I'll file a bug and write a patch for this. I > assume there are ways of enabling features when tests are run? While a > user (or a developer) using WebKit wouldn't want this feature to be > enabled, I think it should be enabled for

Re: [webkit-dev] Implementing OffscreenCanvas

2019-10-11 Thread Ryosuke Niwa
On Fri, Oct 11, 2019 at 2:09 AM Chris Lord wrote: > > On 2019-10-10 23:15, Ryosuke Niwa wrote: > > On Thu, Oct 10, 2019 at 2:07 PM Myles C. Maxfield > > wrote: > > > >>> On Oct 10, 2019, at 12:57 PM, Ryosuke Niwa > >>> wrote: > >>> > >>> Hi Chris, > >>> > >>> I'm excited that you're working on

Re: [webkit-dev] Implementing OffscreenCanvas

2019-10-11 Thread Chris Lord
On 2019-10-10 23:15, Ryosuke Niwa wrote: > On Thu, Oct 10, 2019 at 2:07 PM Myles C. Maxfield > wrote: > >>> On Oct 10, 2019, at 12:57 PM, Ryosuke Niwa >>> wrote: >>> >>> Hi Chris, >>> >>> I'm excited that you're working on OffscreenCanvas because I think >>> it would be a valuable feature >>

Re: [webkit-dev] Implementing OffscreenCanvas

2019-10-10 Thread Ryosuke Niwa
On Thu, Oct 10, 2019 at 2:07 PM Myles C. Maxfield wrote: > > > On Oct 10, 2019, at 12:57 PM, Ryosuke Niwa wrote: > > Hi Chris, > > I'm excited that you're working on OffscreenCanvas because I think it > would be a valuable feature > > > Me too!!! > > , and I'm confident we can come up with a

Re: [webkit-dev] Implementing OffscreenCanvas

2019-10-10 Thread Myles C. Maxfield
> On Oct 10, 2019, at 12:57 PM, Ryosuke Niwa wrote: > > Hi Chris, > > I'm excited that you're working on OffscreenCanvas because I think it would > be a valuable feature Me too!!! > , and I'm confident we can come up with a strategy to limit its privacy & > security risk as we see fit. >

Re: [webkit-dev] Implementing OffscreenCanvas

2019-10-10 Thread Ryosuke Niwa
Hi Chris, I'm excited that you're working on OffscreenCanvas because I think it would be a valuable feature, and I'm confident we can come up with a strategy to limit its privacy & security risk as we see fit. However, many of your patches seem to ignore the fact most of WebCore objects aren't

Re: [webkit-dev] Implementing OffscreenCanvas

2019-10-10 Thread Maciej Stachowiak
> On Oct 10, 2019, at 10:18 AM, John Wilander wrote: > >> On Oct 10, 2019, at 9:42 AM, Maciej Stachowiak wrote: >> >> For clarity, it’s already possible to render to a regular canvas offscreen. >> The can be hidden using any of the techniques that can make any >> other canvas invisible.

Re: [webkit-dev] Implementing OffscreenCanvas

2019-10-10 Thread John Wilander
> On Oct 10, 2019, at 9:42 AM, Maciej Stachowiak wrote: > > For clarity, it’s already possible to render to a regular canvas offscreen. > The can be hidden using any of the techniques that can make any > other canvas invisible. Name notwithstanding, OffscreenCanvas is mainly about > being

Re: [webkit-dev] Implementing OffscreenCanvas

2019-10-10 Thread Maciej Stachowiak
For clarity, it’s already possible to render to a regular canvas offscreen. The can be hidden using any of the techniques that can make any other canvas invisible. Name notwithstanding, OffscreenCanvas is mainly about being able to render from a Worker, not about enabling rendering offscreen.

Re: [webkit-dev] Implementing OffscreenCanvas

2019-10-10 Thread Chris Lord
Hi John, I don't know what the current state is of counter-measures for such an attack, but I don't immediately imagine OffscreenCanvas would make them more effective. The patch series doesn't add any new rendering paths, so whatever was possible before will likely still be possible and whatever

Re: [webkit-dev] Implementing OffscreenCanvas

2019-10-10 Thread John Wilander
Hi Chris! Canvas is a very popular GPU fingerprinting vector and allowing it offscreen sounds like a more convenient way to perform such an attack on user privacy. Do you know if Blink or Gecko have elaborated on this? What is your assessment? Given the cross-engine effort to fight device