Vulnerability in all major GPUs lets attackers read pixels in Chrome and Edge

[Jan]

Graphics cards from all major suppliers vulnerable to data-stealing attack

Graphics processing units (GPUs) from Apple, AMD, Intel, Qualcomm, Arm, and Nvidia are vulnerable to a new attack that lets malicious websites read usernames, passwords, and other sensitive data displayed by other websites.

According to a research paper published on Tuesday, 26 September 2023, the cross-origin attack lets a malicious website from one domain read pixels displayed by other domains.

 

[SubtleBeast]

However, for the attack to work, a malicious page must be loaded into Chrome or Edge. Internal differences in the way Firefox and Safari work block the attack from stealing pixels.

 

[My_King]

What about oupara:

 

[SubtleBeast]

What about oupara:

View attachment 1593422

Didn't they switch to Chromium core a couple of years ago?
Correct me if I'm wrong.

 

[My_King]

Didn't they switch to Chromium core a couple of years ago?
Correct me if I'm wrong.

Seems that way

 

[BeerIsNotGood...]

Seems that way

View attachment 1593456

I'm so sorry...

 

[My_King]

I'm so sorry...

No worries

 

[hj007]

Impressive

 

[Priapus]

Just another reason why I don’t use anything else besides safari.

 

[saturnz]

wow firefox saved me for once

 

[Swa]

Seems like Google is the problem again. Just turn off acceleration.

 

[Swa]

Just another reason why I don’t use anything else besides safari.

 

[r00igev@@r]

I'm on Waterfox and I swear by it.
Firefox unbloated.