ChALkeR
Joined 11 years ago
Karma
66
Submissions
31
Member since
Dec 6
[ my public key: https://keybase.io/chalker; my proof: https://keybase.io/chalker/sigs/s4pY6mFQ3GplQr1rC_cYRZ_KFHPkjLrJyOgnVgWsuxQ ]
View on Hacker NewsRecent submissions
Comment · 9 years ago
The correct figure is 10%.
Comment · 10 years ago
Comment · 10 years ago
I tried hard to cover all the possible question.
Please, read the post _carefully_ before asking or proposing anything.
Comment · 10 years ago
Note: this actually means that everyone should regenerate all their key-pairs after updating.
Comment · 10 years ago
And no, switching Buffer(number) to be zero-filled will bring more harm now, even from the security point of view. The best course of action imo is to deprecate Buffer(number) whatsoever and replace it with two separate methods. More info here: https://github.com/nodejs/node/issues/4660#issuecomment-1712...
I will make a separate post about that soon enough.
Comment · 10 years ago
This note does not have anything actually new, but I have seen several people who are not aware of that.
Comment · 10 years ago
Looks like it bundles libavformat internally.
Comment · 10 years ago
By the way, mplayer is also affected, even after installing a fixed version of ffmpeg.
Comment · 10 years ago
It does not, that's covered in the original article.
Comment · 10 years ago
But that code that you linked to does not verify that the file is mp4, moreover, mp4Sig call is commented out.