4 ms·

> Isn't it safe to assume that no video file can escape the browser decoding sandbox? Why would that be safe to assume? If that were a reasonable assumption, y

• ttoinou 4mo ago
  The parent does argues it is safer to sandbox ffmpeg yes
• Denvercoder9 4mo ago
  I'm not up-to-speed with the current state of sandboxing in browsers, but in principle it's (on modern operating systems) not especially hard for them to sandbox the decoding into a separate process with basically no privileges beyond rendering a video stream. It's a bit trickier if we're only considering demuxing and delegating decoding to the hardware, but that's a much smaller attack surface. A manually run ffmpeg on the command line does nothing to restrict its privileges, and its security model has very little interest in doing so, while browsers very much have.
  • lostglass 4mo ago
    Yeah, then you need to stream content in real time between multiple processes. And not screw up the licensing. And get hardware acceleration working...
    • deleted 4mo ago
      [deleted]