H26Forge: Exploiting Vulnerabilities in the H.264 Decoders of iOS, Firefox, VLC [pdf]

This page summarizes the projects mentioned and recommended in the original post on news.ycombinator.com

InfluxDB - Power Real-Time Data Analytics at Scale
Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
www.influxdata.com
featured
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com
featured
  • mp4parse-rust

    Parser for ISO Base Media Format aka video/mp4 written in Rust.

  • The mp4 demuxer is indeed in Rust [0], and runs in the content process (= the process in which the web page is loaded).

    We don't have a h264 decoder in our source tree, we use the platform's decoder (because of patents). It's very often in a separate, dedicated process, and when it's not, it's in the GPU process, because when hardware accelerated decoders are used, they're using more or less the same resources as the rendering code.

    Those other processes with the tightest sandbox possible (per process type, per platform, etc.), and don't have access to the web page.

    On Linux, the platform decoder we're using is `libavcodec` from FFmpeg, but that's still in a separate process with a tight sandbox.

    We're also doing something interesting, which is compiling libraries to WASM and then back to native code to get memory safety [1]. This is used when performance isn't critical (unlike codecs, so, e.g. a demuxer that we don't want to rewrite in Rust).

    [0]: https://github.com/mozilla/mp4parse-rust/

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts

  • Machine learning in Elixir is production-ready

    3 projects | news.ycombinator.com | 9 May 2024
  • Pagefind, a static open-source search library

    1 project | news.ycombinator.com | 9 May 2024
  • Ask HN: How's your experience with Compose/Kotlin multiplatform?

    1 project | news.ycombinator.com | 9 May 2024
  • Aya Rust tutorial Part One

    1 project | dev.to | 9 May 2024
  • Solving the Localhost Development Headache with Nanocl

    2 projects | dev.to | 9 May 2024