News for hackers. Stuff that matters.

A comment on Malicious Subtitles Threaten Kodi, VLC and Popcorn Time Users. Parent comment

Re:Malicious Subtitles Threaten Kodi, VLC and Popcorn Time U... by johncolanduoni on Wednesday May 24, 2017 @08:18AM (#14409417)
You can share file handles/sockets on Windows/OSX/Linux via IPC without giving the renderer process the ability to open the files/sockets themselves.
[ Parent | on HN ]
Re:Malicious Subtitles Threaten Kodi, VLC and Popcorn Time U... by jbk on Wednesday May 24, 2017 @08:47AM (#14409577)
But that's just ONE of the issues. The issue here is that the decoder/parser is in a process that has a too many privileges...
[ Parent | on HN ]