Am I missing something? Who cares? This isn't a security issue, it's just an unexploitable crash on bad data.
everyone knows HN only accepts security write-ups /s
We found a division by zero bug in FFmpeg with a vibecoded fuzzer
191–200 of 274 posts
Re: We found a division by zero bug in FFmpeg with a vibecoded fuzzer
#192Earlier quoted context omitted.
I think when people are complaining about Captcha they're complaining about yet another "pick 6-20 pictures of traffic lights/school busses/stairs/stop signs/bicycles."
Not in this case. I wish I could find the actual post, but I recall reading a post on HN recently where a majority of the commenters were claiming that when they even see a Cloudflare verification checkbox that they leave the website. This makes no sense to me as in my experience, you click the checkbox and then it verifies you without extra steps.
[flagged]
Re: We found a division by zero bug in FFmpeg with a vibecoded fuzzer
#193A patch for this was submitted in April: https://lists.ffmpeg.org/archives/list/ffmpeg-devel@ffmpeg.o... Edit: And there was discussion about this back in 2024 as well
Oddly enough I can’t access that site, it just heats up my phone solving hashes. Gave up after about a minute and anubis had only made it less than halfway through. I doubt the real bots have any trouble bypassing it.
It took around 15kJ to access the site... that's a proper waste and somewhat sad, even though I understand.
Re: We found a division by zero bug in FFmpeg with a vibecoded fuzzer
#194given enough ai, all bugs are shallow
Re: We found a division by zero bug in FFmpeg with a vibecoded fuzzer
#195Earlier quoted context omitted.
Oddly enough I can’t access that site, it just heats up my phone solving hashes. Gave up after about a minute and anubis had only made it less than halfway through. I doubt the real bots have any trouble bypassing it.
It's puzzling how mild the reactions are to Anubis compared to the people reacting to seeing one singular Cloudflare captcha checkbox. I'd much rather a checkbox than a brief CPU-intensive hashing session.
A zero-interaction screen is better. If I can open it in a new tab and then come back and it's fully loaded, it's good.
Re: We found a division by zero bug in FFmpeg with a vibecoded fuzzer
#196A patch for this was submitted in April: https://lists.ffmpeg.org/archives/list/ffmpeg-devel@ffmpeg.o... Edit: And there was discussion about this back in 2024 as well
Oddly enough I can’t access that site, it just heats up my phone solving hashes. Gave up after about a minute and anubis had only made it less than halfway through. I doubt the real bots have any trouble bypassing it.
it's putting full load on my 6core 11th gen i5 machine for more than a minute. i just closed it..
Re: We found a division by zero bug in FFmpeg with a vibecoded fuzzer
#197Earlier quoted context omitted.
Not in this case. I wish I could find the actual post, but I recall reading a post on HN recently where a majority of the commenters were claiming that when they even see a Cloudflare verification checkbox that they leave the website. This makes no sense to me as in my experience, you click the checkbox and then it verifies you without extra steps.
[flagged]
the standard for user agents behavior tends to be described in certain RFCs
Re: We found a division by zero bug in FFmpeg with a vibecoded fuzzer
#198Earlier quoted context omitted.
[flagged]
I assume you're offering to pay for the increased server costs? I had some git hosting up for a while, and was serving hundreds of qps and several terabytes per month. I can only imagine want significant sites are serving.
> I assume you're offering to pay for the increased server costs?
Such a non-argument.
I'm expecting people to create better, more effective, and less intrusive anti-bot measures. Measures that accurately detect bots but don't exclude real people from the web simply because of the browser they're using, or the country they either appear to be in or are in fact in, for example.
Re: We found a division by zero bug in FFmpeg with a vibecoded fuzzer
#199I am sure the fuzzer is interesting.
But this bug feels like something an LLM would flag as a major finding but turns out to be completely benign.
Update: I tried to look into the fuzzer but it is hard to get past the AI blabb. Can someone please explain to me what it does beside being structure aware?
Re: We found a division by zero bug in FFmpeg with a vibecoded fuzzer
#200Earlier quoted context omitted.
It's Anubis and it's actually cool and loved project here. It's an open-source Captcha that filters out bots, and it doesn't track you around the web, unlike Google or cloudflare captcha.
Cool, and loved by some. Annoying and disliked by others. I understand why people choose it, but if I see the catgirl I close the tab - same is I get the test from cloudflare.
Yep, but it's their freedom -- website authors have freedom to designe websites however they choose, and we as consumers have freedom to not go there.
I was startled by the girl the first time as well, but once I learned what it is, I accepted it. Like a garden gnome on someone's front yard.