morphJul 2
feliks
yarrrr
Jul 2 at 2:35pmWeb
Show threadnecrophcodrJul 2
@feliks a video can include a malicious payload aka virus, and an exploit for automatically running it via a media player backend. in theory.
Show threadfeliksJul 2
@necrophcodr
Show threadRileyJul 2

@feliks kinda feels a bit off tho
I think of it more like:
Premium 19.99/month
- shitty 1080p
- Watch on 2 devices (same network only)
- Increase shareholder value
- only some media (selection may change any time)
- offline play for max 2 episodes (expire after 2 days no internet, only available for subset of content)

Pirate It like 5/month
- 8K UHD BDRip
- ALL the media, even music
- random Eastern European subtitles included
- offline play, even after canceling
- free VPN included

Show threadXerz 💗Jul 2
@feliks videos can have viruses tho…. pretty hard these days, but still…
Show threadHaelwenn /элвэн/ Jul 2
@xerz @feliks audio cds can too, sony proved it: https://en.wikipedia.org/wiki/sony_rootkit
Sony BMG copy protection rootkit scandal - Wikipedia

Show threadxinit ☕Jul 2
@feliks Take the cheapest package they offer, then ALSO pirate it. While not the legal high ground, I have convinced myself that it covers the moral end.
Show threadfeliksJul 2
@xinit not sure about that seeing common keys for distribution of profits
Show threadxinit ☕Jul 2

"It's literally a video, it can't have a virus"

Give it time.

Show threadTutilurenJul 2

@xinit

Quick web search reveals that this time is already past. I think it should not be hard to find many more exploits in video containers, as they are quite complex, widespread and versatile; an inviting environment for exploitation.

https://www.exploit-db.com/exploits/40436

https://www.exploit-db.com/exploits/18572

https://github.com/dumbbutt0/evilMP4

Google Android 5.0 < 5.1.1 - 'Stagefright' .MP4 tx3g Integer Overflow (Metasploit)

Google Android 5.0 < 5.1.1 - 'Stagefright' .MP4 tx3g Integer Overflow (Metasploit). CVE-2015-3864 . remote exploit for Android platform

Exploit Database
Show threadxinit ☕Jul 2
@n A long time ago, I remember people scoffing "It's just an EMAIL, what possible harm could it do?"
Show threadLyksoJul 2
@feliks "Can't have a virus." LOL.
Show threadRadomír ŽemličkaJul 3
@feliks 1080p? On a "secure" device (e.g., outdated Android TV box), under ideal conditions, maybe. On a PC? You get 720p at best, but more likely 480p. 🙃 So the choice is clear.
Show threadƧƿѦςɛ♏ѦਹѤʞ1d ago
@feliks
LOLz