Mine lives on my shelf so… not?

In normal countries, guns aren’t toys you get in a cereal box.

Yes but why are we allowing user input to be fed to an executable in that environment?

Does nobody isolate ffmpeg and friends from their application?

I can’t imagine you’d have much fun breaking into a container that terminates the moment the original ffmpeg stops, or over-runs its max execution time…

What the fuck is a zero day in the context of ffmpeg?

Its not like its a system service that you can get ingress through…

“AI found 21 bugs in massive video project” sounds like junior developer shit hungry to get some shit on their resume.

Even if it wasn’t AI slop, this wouldn’t be impressive.

People pay for that?

Where there’s a will, there’s a way.

Every technical hurdle they put up, is defeatable.

Every time they make the wall higher, we make the ladder longer.

There will come a time where there will be a privacy-conscious choice and that might require flashing the infotainment system.

We’re getting closer to one of Cory Doctrows stories. I can’t find a direct link, but its on this page under the name “Plausible Deniability”