Mishaal Rahman / Android Authority
TL;DR
- Google is testing a brand new possibility inside Android’s Superior Safety Mode to disable the WebGPU API in Chrome to stop safety exploits.
- Whereas WebGPU permits for high-performance rendering, it’s inclined to vulnerabilities that may result in distant code execution.
- This modification follows different current restrictions found within the one-click safety mode, similar to limits on the AccessibilityService API.
With Android 16, Google launched Superior Safety Mode. It is a one-click safety mode that allows all of Android’s highest security measures to safeguard high-risk people towards on-line assaults, dangerous apps, and information dangers. We’ve lately noticed Google testing limiting the AccessibilityService API except they’re labeled as accessibility instruments beneath Superior Safety Mode. Immediately, we’ve noticed Google working to disable Chrome’s WebGPU API when customers toggle Superior Safety Mode.
The WebGPU API allows net builders to make use of the system GPU to carry out high-performance computations and render advanced photos within the browser. WebGPU succeeds WebGL, offering higher compatibility with fashionable GPUs, assist for general-purpose GPU computations, sooner operations, and entry to extra superior GPU options.
WebGPU is enabled by default in Chrome 121 and afterward units working Android 12 or increased with Qualcomm or ARM GPUs. Regardless of the assist circumstances in place, that is fairly a large internet, so we see WebGPU throughout standard units as of late.
One disadvantage of WebGPU is its susceptibility to assaults and vulnerabilities, which have been used for distant code execution in some circumstances. Whereas vulnerabilities ultimately get fastened, that normally occurs solely after safety researchers uncover them — dangerous actors can misuse them earlier than disclosure to focus on high-risk people and compromise their safety and privateness.
Don’t wish to miss the perfect from Android Authority?
Google seems to pay attention to WebGPU’s dangers and is planning to disable it in Chrome when a consumer allows Superior Safety Mode. We noticed clues inside Google Play Companies v26.10.31 and managed to allow a brand new “Flip off WebGPU to assist shield towards safety threats” possibility in Superior Safety Mode.
AssembleDebug / Android Authority
This upcoming possibility will be a part of different Chrome safety options similar to Android Protected Searching, Chrome Searching (for HTTPS), and JavaScript Protections. We’ll maintain you up to date after we study extra about its rollout.
⚠️ An APK teardown helps predict options that will arrive on a service sooner or later based mostly on work-in-progress code. Nonetheless, it’s potential that such predicted options might not make it to a public launch.
Thanks for being a part of our group. Learn our Remark Coverage earlier than posting.
