189

Grandma we only use torrents for games, or to transfer things. (thelemmy.club)

submitted 1 week ago by Grumpus_Maximus to c/piracy@lemmy.dbzer0.com

42 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[-] glibg10b@lemmy.zip 14 points 1 week ago

Torrents aren't risky for movies as long as you don't have "Hide file extensions" turned on. Unless someone's wasting their zero-day video player exploit on you, which is unlikely, you wont find malware in an mp4 or mkv unless it's actually an exe in disguise

[-] Cassa@lemmy.blahaj.zone -3 points 1 week ago

sry, but that's just straight up wrong. You can hide malware in video files (both mp4 and mkv are great containers!) and you can disguise your virus as a video.

[-] glibg10b@lemmy.zip 7 points 1 week ago

That's like encoding malware in a picture and calling it dangerous

[-] Cassa@lemmy.blahaj.zone 1 points 1 week ago* (last edited 1 week ago)

yes? opening a picture with malware could infect your computer.

It would be a combination attack, so the virus would either target the correct media player or several of em.

here is a older vulnurability with vlc and avi file https://nvd.nist.gov/vuln/detail/CVE-2021-25801

it is absolutely far less risky than downloading programs that run code, but it's not without any risk

edit: windows programs also lets files call home. Script Command in windows media player f.ex 🤷

[-] glibg10b@lemmy.zip 5 points 6 days ago

Like I said, no one's wasting a 0-day on a lemming like you or me

[-] whoami@sh.itjust.works 3 points 1 week ago

But malware wrapped as video (or any other doc or media format) still needs to be executed, right? So if you don't give that file execute permission (which Linux doesn't give by default) and open it through media player or something, could said potential malware still run? I thought it couldn't unless the player itself is vulnerable

[-] Cassa@lemmy.blahaj.zone 3 points 1 week ago

no, these things would try to exploit the program that read them.

it's not a likely attack vector, you need both a malware file, and the right program trying to read it. it might not also be transferrable across different os.

so yes, it needs a media player to attack. https://nvd.nist.gov/vuln/detail/CVE-2021-25801 this one f.ex