Hacker News Reader

AIUI, (lib)ffmpeg is used by practically everything that does anything with video, including such definitely-security-sensitive things as Chrome, which people use to play untrusted content all the time.

View on HN

Then maybe the Google chrome devs should submit a PR to ffmpeg.

Sure. And fund them.

Chrome devs frequently do just that, Chrome just doesn’t enable this codec.

hmm, didn't realize chrome was using ffmpeg in the background. That definitely makes it more dangerous than I supposed.

Looks like firefox does the same.

Firefox has moved some parsers to Rust: https://github.com/mozilla/mp4parse-rust

Firefox also does a lot of media decoding in a separate process.

Pretty much anything that has any video uses the library (incl. youtube)

Reply on news.ycombinator.com