News for hackers. Stuff that matters.
Re:Is Your VirtualBox Reading Your E-Mail? Reconstruction of... by lxgr on Sunday March 22, 2015 @06:40AM (#9246296)
This is an issue for any software that is able to access the GPU: http://blog.lxgr.net/tag/opengl.html
Re:Is Your VirtualBox Reading Your E-Mail? Reconstruction of... by brtmr on Sunday March 22, 2015 @06:50AM (#9246321)
Yes, that is the exact same issue. While searching for any prior art, i did not find your blog post, but the problem seemed far too obvious for me to be the only one to have ever stumbled upon it. I do think this issue needs some exposure, there seem to be a lot of potential security ramifications.
Re:Is Your VirtualBox Reading Your E-Mail? Reconstruction of... by zurn on Sunday March 22, 2015 @08:21AM (#9246487)
Just in components that claim to provide security boundaries but then do OpenGL passthrough without precautions. Web browsers handle this this properly in WebGL. VirtualBox is at fault here.

Your linked article is about just running two native desktop apps side by side under the same user account, there isn't any supposed security boundary between them so it's a different case.

Re:Is Your VirtualBox Reading Your E-Mail? Reconstruction of... by brtmr on Sunday March 22, 2015 @09:30AM (#9246671)
Oracle also discourages the use of 3D acceleration for untrusted hosts. See here: http://www.virtualbox.org/manual/ch04.html#guestadd-3d
Re:Is Your VirtualBox Reading Your E-Mail? Reconstruction of... by brtmr on Sunday March 22, 2015 @10:07AM (#9246763)
i have added your blogpost to the document as prior art.