I would have assumed the range of things you could do in video would be limited ... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

Zuiii on Oct 26, 2023 | parent | context | favorite | on: iLeakage: Browser-Based Timerless Speculative Exec...

I would have assumed the range of things you could do in video would be limited by codec. Can you provide links that explain how video can achieve similar feats?

rfoo on Oct 26, 2023 [–]

Font: https://developer.apple.com/fonts/TrueType-Reference-Manual/..., there's a lot of exploits in various implementations about ten years ago: https://security.stackexchange.com/questions/91347/how-can-a.... There's still active ITW exploits in 2023: https://googleprojectzero.github.io/0days-in-the-wild//0day-...

Image: The famous JBIG2.

Video: https://en.wikipedia.org/wiki/Stagefright_(bug)

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact