Btw there are so many "critical" vulnerabilities in libheif I can't even tell if I have them all patched. Just awesome.
replyhttps://github.com/strukturag/libheif/security/advisories?qu...
https://ubuntu.com/security/notices/USN-8649-1
At this point writing a media file parser in C/C++ is absurdly stupid. The same thing happened with libjxl.
replyIt does make me wonder how much this could be hardened by, to put it in an extremely crude way, taking the current imagemagick code base and throwing a bunch of adversarial SOTA LLMs at it to discover 'bugs' and exploits of this nature until it can be coaxed into a less dangerous state. Or even using the LLMs to fully port its functionality to a memory safe language. Would take a while to get all the changes approved and then into various distribution imagemagick packages.
replyI suspect the latter is much easier and cheaper than the former? You can port a lot of software with cheap (or even local) models if you're tenacious whereas finding all the bugs is both very very expensive (if it's even possible) and potentially never ending (there's always new code and bugs!).
replyMaybe these big ai labs will uses their own devices to find and fix bugs up and down their stack and contribute that back.
replyPHP still rules the world, even though many doesn't want to realize it. It's still the biggest web language by a far margin
replyPhones don’t “rule the world” of cinematography, despite the majority of videos being from phones. The serious stuff, professional and personal, uses cameras.
replytoo powerful to give up, sweet imagick love
reply