diff --git a/hosts/FredOS-Eee.nix b/hosts/FredOS-Eee.nix
index bfa0082..ccf0736 100644
--- a/hosts/FredOS-Eee.nix
+++ b/hosts/FredOS-Eee.nix
@@ -96,14 +96,12 @@ in
 
   # Firefox is marked unsupported on i686 (Mozilla dropped 32-bit Linux), so
   # WebKit is the only engine left that handles the modern web.
-  # WebKit's GPU rendering froze the box the instant bbc.co.uk started to
-  # paint (also on 6.12, memtest clean); NetSurf and the desktop, which don't
-  # touch GL, never did. Keep WebKit off the GMA 945 entirely.
-  environment.sessionVariables = {
-    WEBKIT_SKIA_ENABLE_CPU_RENDERING = "1";
-    WEBKIT_DISABLE_DMABUF_RENDERER = "1";
-    WEBKIT_DISABLE_COMPOSITING_MODE = "1";
-  };
+  # GNOME Web hard-froze the kernel loading bbc.co.uk: no oops, nothing in
+  # the journal. Ruled out RAM (memtest86+, memtester), kernel 6.18 vs 6.12,
+  # GL (never initialised), heat (5min full load, 67°C). Without WebKit's
+  # bubblewrap/seccomp sandbox it doesn't. Toy box: don't log into anything
+  # that matters in GNOME Web.
+  environment.sessionVariables.WEBKIT_DISABLE_SANDBOX_THIS_IS_DANGEROUS = "1";
 
   # NetSurf: no JavaScript, so news sites load as plain pages on this CPU.
   environment.systemPackages = [