But if you don't support HEIF you get the Apple crowd breathing down your neck. The fact they made it basically default when sooo many things don't support receiving it is bonkers, but they'll bludgeon it through.
replyOr OpenAI can adequately sandbox / access control the backend compute so RCE isn’t a path to lateral movement
replyDefense in depth here would have been adequate
Defense in depth + defense in breadth - aka. all of the above
replysandbox escapes have been the rage recently
Not firecracker
replyplease don't jinx it
replyYeah, isn’t that Claude Codes sandbox? That drops and every npm install it taking over the world, lol.
replyNo, it is sandboxed by Bubblewrap on Linux and Seatbelt on Mac
replyI agree, but imagemagick is kind of the worst of the bunch, graphicsmagick is a lot better and libvips significantly so.
Ffmpeg primarily suffers a lot from “we need to support the video format used on a washing machine display used in 1981 and only sold ten units”. It’s quite a large vector for attacks.
replyffmpeg also prioritizes high performance assembly code over higher level languages. Some ffmpeg members have also waste knowledge about optimizing for specific micro-architectures, on a level of Intel or AMD engineers.
replyand thank god for that. it would be a pity for the world to succumb to the abstraction hell.
replyto make my point clear, complexity is the enemy of security but complexity comes in all shapes and sizes, which includes the alleged solutions to it. I don't trust shortcuts.