4 ms·
Sounds like a version of the WebP bug that abuses link previews to display the image maybe?
by ehhthing 3y ago
Sounds like a version of the WebP bug that abuses link previews to display the image maybe?
- sergioisidoro 3y agoWhen I heard about this, I also associated the two. The report talks about link preview generation, so it sounded like someone could put a webp on the social metadata of a page for link previews, and then send it as a malicious payload. But that would mean any app with link preview (eg. slack, whatsapp, discord) would also be affected...
- Klonoar 3y agoNothing in the linked article even remotely suggests that.
- tptacek 3y agoSignal patched WebP weeks ago.
- tedunangst 3y agoHow can a bug that doesn't exist sound like anything?