themachinestops@lemmy.dbzer0.com to Technology@lemmy.worldEnglish · 8 days agoAI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugsthehackernews.comexternal-linkmessage-square39linkfedilinkarrow-up1151arrow-down129
arrow-up1122arrow-down1external-linkAI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugsthehackernews.comthemachinestops@lemmy.dbzer0.com to Technology@lemmy.worldEnglish · 8 days agomessage-square39linkfedilink
minus-squarenitroemdashlinkfedilinkEnglisharrow-up2·7 days agoFFMPEG in the command line generally has permission to access the entire non-sudo filesystem and delete files.
minus-squaregreyscale@lemmy.grey.ooolinkfedilinkEnglisharrow-up1·7 days agoYes but why are we allowing user input to be fed to an executable in that environment?
minus-squareKairos@lemmy.todaylinkfedilinkEnglisharrow-up4·7 days agoThis is the environment that almost all user software is executed.
FFMPEG in the command line generally has permission to access the entire non-sudo filesystem and delete files.
Yes but why are we allowing user input to be fed to an executable in that environment?
This is the environment that almost all user software is executed.