Cloud companies consider Intel rivals after security flaws found

Re:Cloud companies consider Intel rivals after security flaw... by bitL on Saturday January 13, 2018 @07:19AM (#16139308)

For some reason every single pixel access must be authorized through CORS. I am not sure if this is in the standard or just shoddy implementation in all browsers. Try it yourself, read pixels in one non-CORSed image, and then in CORSed and wonder what went wrong on the drawing board. Some people bypass it via WebGL.

[ Parent | on HN ]

Re:Cloud companies consider Intel rivals after security flaw... by DiThi on Saturday January 13, 2018 @06:04PM (#16141881)

> Some people bypass it via WebGL.

How? There's no concept of a tainted WebGL canvas because it just can't load textures without CORS.

[ Parent | on HN ]

Re:Cloud companies consider Intel rivals after security flaw... by bitL on Sunday January 14, 2018 @12:36PM (#16145205)

Not sure if it still works but it used to work before (~2 years ago). Maybe it was fixed in the meantime.

[ Parent | on HN ]

Re:Cloud companies consider Intel rivals after security flaw... by DiThi on Sunday January 14, 2018 @01:23PM (#16145443)

That totally sounds like a bug to me, it shouldn't happen.

[ Parent | on HN ]