3 ms·
i don't understand how one thing leads to another. if anything, a popular feature (videos) is more protected against 0days as there's more eyes on it, not the o
by areyourllySorry 2y ago
i don't understand how one thing leads to another. if anything, a popular feature (videos) is more protected against 0days as there's more eyes on it, not the opposite. what else could a "malicious video file" be, a cognitohazard? i am aware of the facebook tails video 0day but that's not a browser issue, nor is it a common issue
- autoexec 2y ago> if anything, a popular feature (videos) is more protected against 0days as there's more eyes on it, not the opposite. It's usually the opposite. The more common something is, the more likely attackers are to target that thing. Adobe acrobat was a prime target for malicious PDF files because it was what everyone used. Once browsers started displaying PDF files attackers turned their attention there. Ultimately every exploit that gets discovered does result in increased security, as bad code gets patched, but there's no shortage of bad code and even long lived codebases get new flaws discovered all the time. > what else could a "malicious video file" be, a cognitohazard? malicious video files usually target whatever software processes them. Here are some other examples: https://nvd.nist.gov/vuln/detail/CVE-2023-6351 https://nvd.nist.gov/vuln/detail/CVE-2023-6351 https://nvd.nist.gov/vuln/detail/CVE-2024-13156 https://nvd.nist.gov/vuln/detail/CVE-2024-13156 https://nvd.nist.gov/vuln/detail/CVE-2023-29341 https://nvd.nist.gov/vuln/detail/CVE-2023-29341 https://nvd.nist.gov/vuln/detail/CVE-2023-6879 https://nvd.nist.gov/vuln/detail/CVE-2023-6879 https://nvd.nist.gov/vuln/detail/CVE-2024-57510 https://nvd.nist.gov/vuln/detail/CVE-2024-57510 https://nvd.nist.gov/vuln/detail/CVE-2022-2566 https://nvd.nist.gov/vuln/detail/CVE-2022-2566 https://nvd.nist.gov/vuln/detail/CVE-2020-11184 https://nvd.nist.gov/vuln/detail/CVE-2020-11184