MP4 video 0-day exploit making the rounds on Discord

twitter.com

16 pointsronsor3 comments

This might not be what is being reported (supposedly these sandbox errors are caused by something in VLC, not the exploit).

https://twitter.com/cactusfifteen49/status/13563448317657251...

>I find it hard to believe that you really were a sysadmin, or a pentester, as one of the major principles of security is responsible disclosure.

Oh wow. This guy has really embraced software vendor PR efforts from the early 2000s.

Incredible that people still speak of “responsible disclosure” in 2021, even Microsoft abandoned the term 10 years ago.

This has been going on for at least a week. People have been sharing a link that blue screens anyone that views it. I'm keeping link previews and embedded media off permanently. This is the second severe security issue with discord in only a few months.

Reply on news.ycombinator.com