this post was submitted on 01 Dec 2023
183 points (99.5% liked)
Piracy: ꜱᴀɪʟ ᴛʜᴇ ʜɪɢʜ ꜱᴇᴀꜱ
55016 readers
588 users here now
⚓ Dedicated to the discussion of digital piracy, including ethical problems and legal advancements.
Rules • Full Version
1. Posts must be related to the discussion of digital piracy
2. Don't request invites, trade, sell, or self-promote
3. Don't request or link to specific pirated titles, including DMs
4. Don't submit low-quality posts, be entitled, or harass others
Loot, Pillage, & Plunder
📜 c/Piracy Wiki (Community Edition):
💰 Please help cover server costs.
 |
 |
|---|---|
| Ko-fi | Liberapay |
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
People me saying this but what malware is in mkv files? I don’t understand why anyone takes the risk of pirating software, that’s obviously all infected.
And TPB gets those MKVs seemingly faster than any other site I’ve seen and with a ui that’s easier to use due to not being modern garbage
FWIW common libraries like ffmpeg and what not can contain bugs which video files could potentially abuse and exploit.
Is that a common risk? Probably not. But image libraries have been known to have such exploits.
The fun thing is that it's basically unquantifiable how large the risk is. We only know about vulnerabilities after we find them!
You want dat zero day shizzle, homie
Isnt there a popular PS2 hack method which is basically using a broken video?
If TPB tells you to download a malicious MKV file, it might be specially crafted to exploit a vulnerability in your video player. For instance, VLC had a vulnerability in 2019: https://www.videolan.org/security/sa1901.html
The chances of an mkv or mp4 containing malware are not zero, but might as well be, imo. You're much more likely to encounter moviefilename.mkv.exe or moviefilename.zip which contains an executable of some kind. Basically traps to take advantage of dumbasses. If you even sort of know what you're doing using tpb for purely media is okay. Hypothetically, of course.