trompete [he/him]

  • 15 Posts
  • 538 Comments
Joined 3 years ago
cake
Cake day: October 16th, 2021

help-circle





  • Only the chancellor can initiate reelection (via a vote of no-confidence in parliament), so they'd need to replace Scholz first, which means the opposition (CDU/CSU, AfD and the just kicked out FDP) would need to all get behind the same candidate for chancellor.

    Scholz says he will do the no-confidence vote in January, followed by elections in March. The CDU probably wouldn't want the headache of making deals with the AfD just so reelection is two months earlier.












  • Ffmpeg is used by everybody so you'd hope people are looking at it, but I'm sure there's security bugs in there, and probably plenty of them, since it's C parser/decoder code, probably the most dangerous kind of code. I think web browsers do some kind of sandboxing around ffmpeg, plus web browser restrict the kinds of formats they support, but ffmpeg (and peertube?) supports a lot more, many of which will not be audited/fuzzed to the same degree.

    Ideally this would be sandboxed so much it can't call anything but read(2) and write(2). I have no idea if any of this software does any sandboxing at all.

    Is this any more dangerous than BitTorrenting anime?

    Maybe, depends on the what exactly you're worried about. There's potentially political actors that might be interested in fucking with tankie.tube, whereas you can't really target anyone specifically with bittorrent. Also the attacker knows exactly what software will be used to decode the videos, which makes this easier to exploit. I assume that videos can get uploaded to tankie.tube by basically anybody, and those videos would be sent out to be transcoded on random people's machines?

    If you assume tankie.tube (maybe peertube in general) is just too small to be on anyone's radar, then that's probably fine.


  • Video decoders are all written in C and almost certainly full of exploitable bugs, thus people participating in this are making their personal computers vulnerable to attack via manipulated video files. You'd at least want this sandboxed as much as possible, and have it run as it's own user.