3 ms·
>Writing, maintaining, and updating their own code to process all types of media, and keep up-to-date with all changes to all those types of the media, seems im
by boomboomsubban 6y ago
>Writing, maintaining, and updating their own code to process all types of media, and keep up-to-date with all changes to all those types of the media, seems impossible and certainly uneconomical. What could they do?
There is a middle ground of "force update software on the device more than once a decade." Yes, FFmpeg will always have vulnerabilities, and recreating their work would cost an enormous amount and be less secure. Properly distributing security patches is an affordable alternative.
- numpad0 6y agoThere is no abstract security benefit from updating some software, updates just changes things. Software security is like a bubbly shell with holes and no thickness, patching a random hole means nothing.
- boomboomsubban 6y agoIt changes whether I could exploit the device. I have realistically no way of developing a new hole in their software, but I'm capable of becoming a script kiddie if I wanted to.