News for hackers. Stuff that matters.

A comment on FFmpeg Dealing with a Security Researcher. Parent comment

Re:FFmpeg Dealing with a Security Researcher by ls612 on Saturday November 01, 2025 @06:02PM (#45785825)
It isn't even like this is without precedent, the FORCEDENTRY NSO kit used the shitty old JBIG2 parser that Apple was shipping as its entry point despite the fact that approximately nobody was legitimately using JBIG2 in iMessage.
[ Parent | on HN ]
Re:FFmpeg Dealing with a Security Researcher by hulitu on Sunday November 02, 2025 @10:42AM (#45791112)
> despite the fact that approximately nobody was legitimately using JBIG2 in iMessage.

Then why it has been enabled ? Asking for a friend. /s

Unless Apple, ffmpeg has a reason to enable old codecs. If you only need a subset: configure; make; make install

[ Parent | on HN ]
Re:FFmpeg Dealing with a Security Researcher by astrange on Sunday November 02, 2025 @11:25PM (#45795869)
> Then why it has been enabled ? Asking for a friend. /s

Because it's in the PDF spec, and you can't randomly disable parts of that.

[ Parent | on HN ]