3 ms·
Wasn’t WhatsApp also compromised via gif? Gif is a really remarkable format that seems so simple but it’s much more. It’s just a series of images with timings b
by egfx 6y ago
Wasn’t WhatsApp also compromised via gif? Gif is a really remarkable format that seems so simple but it’s much more. It’s just a series of images with timings but then you realize that the first few bits of the gif can be written with arbitrary code.
A somewhat deep dive into the format https://enthusiasms.org/post/16976438906 https://enthusiasms.org/post/16976438906
- stri8ed 6y agoThis attack does not depend on the GIF. It could just as well have been a JPEG.
- hundchenkatze 6y agoExcept in this case it didn't really have anything to do with GIFs. The actual vulnerability was caused by misconfigured DNS settings for *.teams.microsoft.com
- egfx 6y agoYes I know. I was referring to the title of the article.
- lonelappde 6y agoCode is data. Data is code. The difference is metaphysics; the machine doesn't care. Any parseable data format has the potential to trigger a bug in the parser.