我们使用一个基于vibecode的模糊测试工具,在FFmpeg中发现了一个除以零的漏洞

Hacker News 热门(buzzing.cc 中文翻译)·2026-08-28 05:25·7小时前·dclavijo
AI 导读

开发者通过一个基于vibecode的模糊测试工具,在FFmpeg中发现了除以零漏洞。该工具利用Anubis的Proof-of-Work机制(类似Hashcash)应对AI公司的大规模爬取,在个体规模下额外负载可忽略,但在大规模爬取时成本显著增加。目前该方案为临时措施,后续将转向通过字体渲染等方式识别无头浏览器。

Hacker News 热门(buzzing.cc 中文翻译)
11AI 编辑部评分,满分 100

我们使用一个基于vibecode的模糊测试工具,在FFmpeg中发现了一个除以零的漏洞

2026-08-28 05:25· 7小时前· dclavijo
AI 导读

开发者通过一个基于vibecode的模糊测试工具,在FFmpeg中发现了除以零漏洞。该工具利用Anubis的Proof-of-Work机制(类似Hashcash)应对AI公司的大规模爬取,在个体规模下额外负载可忽略,但在大规模爬取时成本显著增加。目前该方案为临时措施,后续将转向通过字体渲染等方式识别无头浏览器。

Making sure you're not a bot!

Anubis could not load its JavaScript. The server may be overloaded. Please reload the page to try again.

You are seeing this because the administrator of this website has set up Anubis to protect the server against the scourge of AI companies aggressively scraping websites. This can and does cause downtime for the websites, which makes their resources inaccessible for everyone.

Anubis is a compromise. Anubis uses a Proof-of-Work scheme in the vein of Hashcash, a proposed proof-of-work scheme for reducing email spam. The idea is that at individual scales the additional load is ignorable, but at mass scraper levels it adds up and makes scraping much more expensive.

Ultimately, this is a placeholder solution so that more time can be spent on fingerprinting and identifying headless browsers (EG: via how they do font rendering) so that the challenge proof of work page doesn't need to be presented to users that are much more likely to be legitimate.

Please note that Anubis requires the use of modern JavaScript features that plugins like JShelter will disable. Please disable JShelter or other such plugins for this domain.

来源:Hacker News 热门(buzzing.cc 中文翻译)· code.ffmpeg.org