logoalt Hacker News

haskellshilllast Saturday at 11:11 PM1 replyview on HN

>rarely anyone ever uses

It's enabled by default so all that's required to exploit it would be to construct a payload file and name it movie.mp4


Replies

defrostlast Saturday at 11:31 PM

If only Google had the ability to custom compile FFmpeg to only include robust mainstream codecs.

In such a would they might even handball submitted obscure codecs to a full build in a sandbox to track bleeding edge malware.

show 1 reply