As in title. What’s your experience with it? If something isn’t executable, then it has to exploit vulnerability in order to run anything malicious. But does it happen often with mp4, mkv and other files like mp3 or epub?

I assume that if I use updated linux, then I’m mostly safe?

1 point

I had dodged stuff before when I downloaded software, I’d be weary of anything you give permission to run on your pc. But for movies and music etc, I check what files I’m getting. While this doesn’t eliminate the risk of malware cased in a .mkv, I only download on a Linux VM, and usually first open on MacOS.

permalink
report
reply
1 point

I meant dodgy stuff from downloading software. Damn autocorrect.

permalink
report
parent
reply
3 points

I don’t think I’ve seen malware associated with video content since the Limewire days. I think the closest I’m aware of in recent memory was some talk of malware coming out of some of the “fake” Pirate Bay proxies, but even then I’m not sure it was associated with video.

Any halfway respectable tracker public or private you should be fine.

permalink
report
reply
4 points

Movies? Usually it’s like “go to malware.com for the password” but you wont get infected from movie files.

permalink
report
reply
4 points

As far as anyone knows there is no way to put malicious code in a video file. What you should be worrying about is how you get those files.

If you’re torrenting then you have to worry about copyright trolls contacting your ISP. If you’re using file-hosting websites just vet your downloads and make sure you don’t run any sketchy executable files. And it should go without saying, but don’t escalate privileges for unknown programs.

permalink
report
reply
5 points

Not entirely true as you can put malicious code in anything. The bigger question is whether or not your video player is susceptible to that type of attack. I would say the likelihood is low but not impossible. The best defense would be to make sure whatever video player you do use is fully up to date.

permalink
report
parent
reply
1 point

So real player is out then?

permalink
report
parent
reply
12 points

it’s almost impossible that some state sponsored attacker will waste a 0day to attack random people downloading the latest movie from torrent. And when it happens all the news will talk about it

permalink
report
reply
1 point

State sponsored hackers are a very small percentage of the threat actors out there. Also - they don’t need to exploit a zero day if you are willingly launching something on your machine.

permalink
report
parent
reply

Piracy: ꜱᴀɪʟ ᴛʜᴇ ʜɪɢʜ ꜱᴇᴀꜱ

!piracy@lemmy.dbzer0.com

Create post
⚓ Dedicated to the discussion of digital piracy, including ethical problems and legal advancements.

Rules • Full Version

1. Posts must be related to the discussion of digital piracy

2. Don’t request invites, trade, sell, or self-promote

3. Don’t request or link to specific pirated titles, including DMs

4. Don’t submit low-quality posts, be entitled, or harass others


Loot, Pillage, & Plunder


💰 Please help cover server costs.


Community stats

  • 4.5K

    Monthly active users

  • 3.3K

    Posts

  • 85K

    Comments