[Matroska-devel] Re: codec as attachment

Lasse Kärkkäinen / Tronic tronic2 at sci.fi
Fri May 27 01:33:42 CEST 2005


> Do you know more? Like when and where it came up and if it was ever 
> posted prominently on the website?

This has been discussed thoroughly on IRC, and possibly also on MCF mailing
lists. You may want to check out MCF and Matroska mailing list archives, if
you are really interested.

Even while the idea may seem good, the problems are quite clear:
1. virii & malware - even with an attempt to sandbox, it would simply be a
too big security hazard.
2. not possible to do cross-platform binary - would need to compile the
codecs from source whenever used.
3. only a very small minority would actually attach codecs.

Even though inclusion of codecs was never a serious idea, there actually was
a field for "codec URI" in the specifications for a long time, but even that
was removed when it became obvious that this would not make it much safer.
The website could still easily be malicious and people downloading porn just
don't stop to think before they install stuff. Having to Google for the
format name, or to look it up in Matroska database (yet to be done, I
guess), would bust the air out of most attack attempts.

- Tronic -
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 256 bytes
Desc: OpenPGP digital signature
URL: <http://lists.matroska.org/pipermail/matroska-devel/attachments/20050527/c8da135a/attachment.pgp>


More information about the Matroska-devel mailing list