WebGL pays strong attention to security - just as any web technology should. With growing recognition of WebGL in the press, we thought we would summarize Khronos' work and stance on this important topic.
- Khronos agrees that security is a vitally important consideration for any web standard. WebGL was architected with security in mind from the ground up.
- All WebGL implementations already necessarily contain safeguards which prevent out-of-range memory accesses during rendering operations and access of uninitialized memory; please see here and here. These safeguards are tested by the WebGL conformance suite.
- Defense against denial of service attacks is still evolving in WebGL implementations. Khronos has specified an extension to OpenGL and OpenGL ES, GL_ARB_robustness, designed to prevent denial of service and out-of-range memory access attacks from WebGL content, preventing any possibility of using WebGL to execute malware on a user's machine.
- GL_ARB_robustness has already been deployed by some GPU vendors and Khronos expects it to be deployed rapidly by others. Browsers can check for the presence of this extension before enabling WebGL content. This is likely to become the deployment mode for WebGL in the near future.
- The ability to incorporate cross-domain images into WebGL scenes provides great utility to developers, but the WebGL working group is considering requiring Cross Origin Resource Sharing (CORS) opt-in or other mechanisms to prevent possible future abuse of this capability.
- The WebGL working group has been working closely with the GPU vendors in the Khronos group to make accelerated WebGL implementations secure and WebGL is influencing GPUs to provide even more flexible security options in the future.
- There are no known WebGL exploits and Khronos will continue to place close attention to technical and ecosystem opportunities to ensure WebGL is a secure technology that can be used with confidence.
Updated May 16 2011
Learning graphics programming in the era of shaders can seem daunting. This website's tutorials provide a firm foundation for understanding how to use modern shader-based hardware for graphics development. No prior graphics programming experience is expected. OpenGL v3.3 is used to demonstrate rendering techniques. Topics covered include: * Vertex transformations * Lighting, diffuse and specular, per-vertex and per-fragment. * HDR lighting and gamma correction.
SGI has updated the list of upcoming OpenGL training courses. A compete schedule can be viewed here.
The new version of music creation software FL-Studio contains a brand new OpenGL powered music visualizer called "ZGameEditor Visualizer" based on the free open source ZGameEditor engine. It comes with over 40 built-in effects that can respond to the music in various ways and it also allows you to create your own effects and share with others. Other features include using video to texture 3d-objects and publish your videos to YouTube.
Students learn with interactive and hands-on sessions about GPU hardware, GPU languages, discovering how best to take advantage of GPUs for their computational needs. The course covers programming in both OpenCL and CUDA, pointing out the similarities and differences along the way. Topics include both the core languages and extensions including those for double precision and interfacing with OpenGL 3D graphics buffers.
The first jME3 release of 2011 is also our last alpha. The beta release of jME3 will finally be in “API freeze”, although most planned API changes have been incorporated already in alpha-4. Several major graphical enhancements on both the low and high ends made it in before the freeze. Post processing water combined with lighted terrain sets the scene for our most impressive display of GLSL graphics yet. Meanwhile, an initial implementation for OpenGL 1 is now available for testing on legacy hardware.
OpenCL Studio combines OpenCL and OpenGL into a single integrated development environment for high performance computing. The feature rich editor, interactive scripting language and extensible plug-in architecture support the rapid development of complex parallel algorithms and accompanying visualization. The first production version of OpenCL Studio including instructional videos and demo applications are available online.
The Khronos Group has posted the OpenGL slide presentations from GDC 2011 online for your viewing pleasure.
Khronos has announced a quick reference card for WebGL 1.0 release spec. This adds to the collection of Reference Cards already available for other Khronos APIs: OpenGL, OpenCL, OpenVG, OpenMAX, OpenSL ES, COLLADA and OpenWF
Khronos Releases WebGL 1.0 Specification to Bring Accelerated 3D Graphics to the Web without Plugins