339
Chrome, Firefox and other browsers affected by critical WebP vulnerability
(siliconangle.com)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 14 Sep 2023
339 points (98.8% liked)
Technology
60035 readers
3786 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 2 years ago
MODERATORS
May I Ask why people don't like webp? I don't know the reason? To my eyes now it is a more ecological way of having pictures because of their lower weight?
It's a better format than JPEG, GIF, or PNG, while doing the jobs of all of those, but better (in most cases), and is an open format. It also has wide compatibility nowadays. The only major downside is a lot of social media services don't even think about it being a potential format due to a lack of awareness/wide usage, leading to a degraded experience when someone shares a WebP somewhere (lack of auto-embedding as an example). I suspect this is why it gets a lot of hate here, which is unfortunate because it's not at all the fault of the format.
AVIF (based on AV1) is the up-and-coming format that beats WebP in most cases now, but support isn't quite there yet (mostly due to Apple), and it has the same problems for social media as WebP. However, it doesn't have any true lossless mode AFAIK. HEIF (based on HEVC) is also good, but is heavily patent-encumbered and not as open. JPEG-XL is dope and potentially even better in some aspects, but has very poor support across the board.
one important tidbit in this whole situation that sheds a lot of light on where and why is adopted: webp is Google's horse, jpegxl is adobe's horse. that's why jpegxl has poor web support, and why webp pisses off designers.
It doesn't piss off designers, but we're pissed at Adobe for making us search for and download plugins to support it.
Seriously, fuck Adobe.
eh, it's just two stubborn corporate entities trying to throw their weight around. the only reason adobe looks bad here is because Google is winning. they both stubbornly refuse to allow the other's standard on their platforms.
jpegxl is the better format, without a doubt, but adobe is a fool if they think they can strongarm Google.
to me, adobe is being foolish, but they're both equally being evil.
Google doesn't really compete in the professional space, though. Adobe does, and we need these tools for a huge number of reasons. When I first started seeing webp's, I kept trying to use them in projects and was unable. I was passing them through online converters for a little bit before realizing there was a plugin.
I don't care which one wins, or which one is more heavily adopted... I just want to see ALL of those in my tools I need for my job.
I know I get annoyed by webp because Telegram processes it as a sticker instead of a normal image. That's my only gripe with it, but like you said that's more Telegram than the actual format.
AVIF only beats WebP for heavily compressed images and it doesn't beat it by much.
If you want high quality images - then WebP is way better than AVIF. And if you want a lossless image then AVIF is totally useless. Lossless AVIF files are often 2x or 3x larger than an uncompressed image. WTF.
Lossless WebP images can be as good as a quarter the size of an uncompressed source.
And as bandwidth improves and images don't really get much bigger (we're already at the limit of human visual perception for reasonable file sizes) for me that makes WebP a better compression algorithm than AVIF.
IDK what you mean by lack of auto-embedding, the support for it has been pretty fantastic from the start. I literally learned about it because I was looking though supported formats for a library, and it's been in the list ever since
This is just me, but when I download a PNG I know it's lossless, when I download a jpeg I know it is lossy but probably a "photo-like" image, a gif? You get it.
One firmat to rule them all will get you badly compressed pixel graphics and unnecessary large "photo" images and so on, not because the format is bad, but if it lets you do so, people will (and companies obviously).
Most images on the internet are way under a MB, is there really that important to lower it slightly?
It's because companies always want to include 100 or 200 or 1000 pictures, because of all the products they are selling, they want to sell them all and right away.
It's dumb, I hate it. lol
Proprietary formats are the bane of humanity. No one company, doesn’t matter, should have control over a file format. They should all be free and universally interoperable. A PSD, for example, should present and store data the same way if used on Photoshop or Pixelmator.
Companies are not your friends.
WebP is not proprietary. It's an open format, is not patent-encumbered, and its reference implementation/libraries are open-source. It is driven mostly by Google, similar to Chromium.
They took the open source WebKit to develop Chrome and Chromium.
How did that turn out?
Google wants to own images. Doesn’t matter if they made the licensing whatever. They make webp. They have a personal vested interest in control.
You trust Google???
Perfectly? Web browsers are way better now than they ever have been.
WebP is a little better than PNG/JPEG and way better than GIF. That's all that really matters.
Hell no. I reluctantly watch a bit of content that's exclusively available on YouTube. Don't use anything else of theirs and I'd drop YouTube in a heartbeat if I could find that content elsewhere.
You may have already noticed, or may soon notice when it slaps you in the face, that google is inserting proprietary code into their browser, into android, and every other product they produce.
Then, one day, you will find all that free open source labour they used to build their empire is no longer open source. They control the web. And you have no idea what they are doing. And if you decide not to continue using their product you will be unable to access sites and services due to Google's super duper friendly and only concerned for your wellbeing internet standards.
Google is evil.
Period.