On 05/12/2011 05:36 PM, David E. Ross wrote: > On 5/12/11 4:55 PM, Robert Kaiser wrote: >> WLS schrieb: >>> Robert Kaiser wrote: >>>> WLS schrieb: >>>>> Is WebGL going to be disabled by default or is that something we will >>>>> need to do in about:config? >>>> >>>> Why should it? >>> >>> Because of the security threat. >>> >>> http://www.theregister.co.uk/2011/05/11/chrome_firefox_security_threat/ >> >> None of that is a real security threat that requires immediate action, >> from all I know and heard (and I'm in Mozilla's security group). This >> looks very much like some "investigator" trying to gather massive media >> attention in his favor without a really good backing. Both "threats" are >> low-impact concerns that we will look into but require no immediate >> action. There will be a Mozilla blog post on this topic very soon. >> >> Media is making every fly into an elephant if they think they can "sell >> a scandal". >> >> Robert Kaiser >> > > US-CERT, an agency within the U.S. Department of Homeland Security, > gives credence to this threat. See > <http://www.us-cert.gov/current/index.html#web_users_warned_to_turn>. >
Don't worry... be happy. :-) (that's a joke) http://www.contextis.com/resources/blog/webgl/faq/ <quote> “What responses have you had from the Browser vendors?” Context has reported these issues and other vulnerabilities to the Mozilla Security group who has raised a number of internal bug reports regarding the issues that we have found, including issues that we have not publicly disclosed. They have also passed the information onto Google for Chrome. The Mozilla Security Group has been very receptive to the issues that we have raised and have been very responsive to our concerns. </quote> Test link crashes FF 4.0.1. <https://cvs.khronos.org/svn/repos/registry/trunk/public/webgl/sdk/tests/extra/lots-of-polys-example.html> But SM 2.1 seems to survive the link. _______________________________________________ support-seamonkey mailing list [email protected] https://lists.mozilla.org/listinfo/support-seamonkey
