maybe i remembered it incorrectly (as i said, it was long ago), but you are the one who often takes the role of “defending microsoft”, and also the one who argued against webgl using “impossible to secure”, along with similar talking points, originating from microsoft.
i’m sorry if i presumed you based your understanding and knowledge on (and cited) actual authorities, even if they are from microsoft. didn’t know you are a genuine browser engine+graphics+security expert yourself, worthy of citing.
first of all, i never said it was just “MS experts”, only that he was citing them, which is pertinent here as they seem to have changed their mind (he just hasn’t caught up yet).
and second, i’m one of the biggest Carmack fans out there (seriously, i watched 100% of his talks from stuff like QukeCon, and i’m proud to state i understood close to 50% of them.. ;)
but he is not exactly an expert in either system/sandbox design, nor security per se. he is probably right about gfx driver culture, but there is also a browser culture that sits between them and the web, and they have a pretty good record of keeping us safe up to now (well, most of them).
i remember (about a year ago) when you were citing MS “experts” how WebGL was a security “nightmare”, how it couldn’t ever be made secure.
there are close to 1 billion devices (computers+phones) that have it available and enabled, by default (in default browsers), and not a single “incident” yet.
glad to see microsoft found the “magic shield of protection” needed to make it secure.
now only if they could find a “spell of forgetfulness”, so that they, along with everyone parroting the company line, don’t look like hypocrites..