4 ms·

Interesting premise, some objections: 1) wouldn't search time be proportional to file size for hashes? These guys worked on 400kb pdf's, while most popular tor

• dcosson 10y ago
  You could replace a single chunk with your malware. Then it could be any size and the rest of the chunks could be the legit content. I don't know much about video codecs, but this assumes there's some way to break out of the playback and run your malicious code. Maybe a buffer overflow, or maybe if your malware is the first chunk of the file you could get it to run first somehow before the video? Or even better, torrents of apps sometimes come with an executable that you run to crack the DRM (so I hear). You could swap that out undetected, and you can probably also convince people they have to run it with sudo.
  • minitech 10y ago
    > Maybe a buffer overflow, or maybe if your malware is the first chunk of the file you could get it to run first somehow before the video? If you have an exploit in a video player, you don’t really need the collision. > You could swap that out undetected, and you can probably also convince people they have to run it with sudo. Also don’t need a collision (or more sudo than usual) for this; just make it patch the application (like it’s supposed to!) with something that runs with low probability.