The Most Dangerous Codec in the World [pdf] 3 years ago (usenix.org) 9 comments jruohonen Reply Add to library ryanisnan 3 years ago A better title would be "H.264: The Most Dangerous Codec in the World [pdf]" throw0101a 3 years ago Meta: always up for some USENIX content:* https://en.wikipedia.org/wiki/USENIXThey've run a lot of interesting conferences over the decades. Kikawala 3 years ago Previous discussion: https://news.ycombinator.com/item?id=35356201 ReactiveJelly 3 years ago (H.264) jruohonen 3 years ago Not a domain expert, but it seems like fuzzing, basically; syntactically correct but non-compliant inputs. Zetobal 3 years ago Funny that it's provided in one of the most dangerous filetypes. Aldipower 3 years ago The codec itself isn't dangerous, the exploits are. g-b-r 3 years ago technologies and their specifications are dangerous themselves if they're likely to result in security bugs
throw0101a 3 years ago Meta: always up for some USENIX content:* https://en.wikipedia.org/wiki/USENIXThey've run a lot of interesting conferences over the decades.
jruohonen 3 years ago Not a domain expert, but it seems like fuzzing, basically; syntactically correct but non-compliant inputs.
Aldipower 3 years ago The codec itself isn't dangerous, the exploits are. g-b-r 3 years ago technologies and their specifications are dangerous themselves if they're likely to result in security bugs
g-b-r 3 years ago technologies and their specifications are dangerous themselves if they're likely to result in security bugs
A better title would be "H.264: The Most Dangerous Codec in the World [pdf]"
Meta: always up for some USENIX content:
* https://en.wikipedia.org/wiki/USENIX
They've run a lot of interesting conferences over the decades.
Previous discussion: https://news.ycombinator.com/item?id=35356201
(H.264)
Not a domain expert, but it seems like fuzzing, basically; syntactically correct but non-compliant inputs.
Funny that it's provided in one of the most dangerous filetypes.
The codec itself isn't dangerous, the exploits are.
technologies and their specifications are dangerous themselves if they're likely to result in security bugs