Hacker News new | ask | show | jobs
by omnicognate 212 days ago
AIUI, (lib)ffmpeg is used by practically everything that does anything with video, including such definitely-security-sensitive things as Chrome, which people use to play untrusted content all the time.
2 comments

Then maybe the Google chrome devs should submit a PR to ffmpeg.
Chrome devs frequently do just that, Chrome just doesn’t enable this codec.
Sure. And fund them.
hmm, didn't realize chrome was using ffmpeg in the background. That definitely makes it more dangerous than I supposed.

Looks like firefox does the same.

Firefox has moved some parsers to Rust: https://github.com/mozilla/mp4parse-rust
Firefox also does a lot of media decoding in a separate process.
Pretty much anything that has any video uses the library (incl. youtube)