Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

We found a division by zero bug in FFmpeg with a vibecoded fuzzer

code.ffmpeg.org

Post reply on HN
Print view View original

181–190 of 274 posts

Re: We found a division by zero bug in FFmpeg with a vibecoded fuzzer

#181

Post by breznev »

aystatic wrote: post #128
Georgelemental wrote: post #127

Earlier quoted context omitted.

> And don't come crying to me about how the problem you're trying to solve is "hard". I don't care: you chose it, you chose to considerably worsen the web browsing experience of millions of people globally, nobody made you. Unfortunately, if you let all the bots in, they overwhelm your servers, and then nobody can access the website.

Not if you use a decentralized peer-to-peer Git forge like https://radicle.network . If one node goes down, users can still access the same issues/PRs from another endpoint.

Genuinely surprised to see these guys still committed to the grift. Berlin ain't so cheap these days, I guess

Re: We found a division by zero bug in FFmpeg with a vibecoded fuzzer

#182

Post by vachina »

timpera wrote: post #143
its-summertime wrote: post #140

Earlier quoted context omitted.

For those with difficulty accessing: - - - From: Anthony Hurtado vpk_read_packet() divides vpk->last_block_size and (par->block_align - vpk->last_block_size) by par->ch_layout.nb_channels without checking for zero. While vpk_read_header() validates nb_channels > 0, the codec parameters may become zero through format probing misidentification (VPK probe score is 2/3 of AVPROBE_SCORE_MAX) or codec parameter reset, caus…

Thank you! I gave up after more than 2 whole minutes of waiting on a high-end smartphone. I'm not sure this keeps bots out, but it definitely keeps users out…

It keeps casual users (which most bots masquerade as) out. For frequent users of that site it is a solve once access forever.

Re: We found a division by zero bug in FFmpeg with a vibecoded fuzzer

#184

Post by arjie »

semiquaver wrote: post #108
aeyes wrote: post #91

A patch for this was submitted in April: https://lists.ffmpeg.org/archives/list/ffmpeg-devel@ffmpeg.o... Edit: And there was discussion about this back in 2024 as well

Oddly enough I can’t access that site, it just heats up my phone solving hashes. Gave up after about a minute and anubis had only made it less than halfway through. I doubt the real bots have any trouble bypassing it.

It's a pity about the web, because it's becoming less accessible over time. Regardless, I (and some others) archive many of the things we browse to, so here you go:

https://amber.agentic.church/web/lists.ffmpeg.org/2026082807...

Apparently, not the fonts they use for icons.

Re: We found a division by zero bug in FFmpeg with a vibecoded fuzzer

#185

Post by stevekemp »

deepsun wrote: post #175
theowaway wrote: post #168

Earlier quoted context omitted.

[flagged]

It's Anubis and it's actually cool and loved project here. It's an open-source Captcha that filters out bots, and it doesn't track you around the web, unlike Google or cloudflare captcha.

Cool, and loved by some. Annoying and disliked by others.

I understand why people choose it, but if I see the catgirl I close the tab - same is I get the test from cloudflare.

Re: We found a division by zero bug in FFmpeg with a vibecoded fuzzer

#186

Post by klez »

deepsun wrote: post #175
theowaway wrote: post #168

Earlier quoted context omitted.

[flagged]

It's Anubis and it's actually cool and loved project here. It's an open-source Captcha that filters out bots, and it doesn't track you around the web, unlike Google or cloudflare captcha.

> and loved project here

You may want to check upthread how loved it is :)

I, for one, don't hate it, but I hate what it represents and see its existence (rather, the reason for its existence) as a defeat for the web.

Re: We found a division by zero bug in FFmpeg with a vibecoded fuzzer

#187

Post by tikotus »

DarmokTanagra wrote: post #178
dabinat wrote: post #2

It’s interesting how AI may both raise and lower the quality of software. It’s very easy to send an AI agent on an open-ended bug hunt, and if it wastes a bunch of time and effort and finds nothing, no big deal. Time is much more important for a human developer with a salary.

Having worked in a few vibe coded codebases over the last few years I can safely say that AI is not raising the quality of anything.

I had the same knee-jerk reaction. "Did I read that correctly?"

But yeah, I guess it can be used to increase certain aspects of quality by letting them go wild. But I think I mostly hear about security or crash issues. In my experience they don't outweigh the number of other issues they cause. Like UI bugs. I've seen more than one service constantly rolling out features that are completely broken, just to have a completely new, still broken, solution available the next day.

Re: We found a division by zero bug in FFmpeg with a vibecoded fuzzer

#188

Post by speps »

dclavijo wrote: post #150
driverdan wrote: post #133

The README for the fuzzer is an AI slop mess. https://github.com/daedalus/fuzzer/

OP here: You are welcome to send a PR if you like. I'll be grateful if someone makes the readme more human.

Surely, you're the best person to do that..? Unless you're not human of course.

Re: We found a division by zero bug in FFmpeg with a vibecoded fuzzer

#189

Post by hdgvhicv »

inventor7777 wrote: post #151
semiquaver wrote: post #108

Earlier quoted context omitted.

Oddly enough I can’t access that site, it just heats up my phone solving hashes. Gave up after about a minute and anubis had only made it less than halfway through. I doubt the real bots have any trouble bypassing it.

It's puzzling how mild the reactions are to Anubis compared to the people reacting to seeing one singular Cloudflare captcha checkbox. I'd much rather a checkbox than a brief CPU-intensive hashing session.

Cloudflare doesn’t work most of the time for me. I’ve seen nothing on this site on my iPhone 12 mini.

Re: We found a division by zero bug in FFmpeg with a vibecoded fuzzer

#190

Post by anal_reactor »

inventor7777 wrote: post #170
da_chicken wrote: post #154

Earlier quoted context omitted.

I think when people are complaining about Captcha they're complaining about yet another "pick 6-20 pictures of traffic lights/school busses/stairs/stop signs/bicycles."

Not in this case. I wish I could find the actual post, but I recall reading a post on HN recently where a majority of the commenters were claiming that when they even see a Cloudflare verification checkbox that they leave the website. This makes no sense to me as in my experience, you click the checkbox and then it verifies you without extra steps.

On my favorite browser (Opera Mobile with desktop mode) Cloudflare verification never works. It just says "failed, please try again" forever.
Post reply on HN