This is such a great music service but I'm wondering who is behind it and why they provide it? It must be costing them something to host the site. Interesting that Cloudflare stats show its biggest user base is India.

you are viewing a single comment's thread
view the rest of the comments

[–] Coopr8@kbin.earth 4 points 1 month ago (8 children)

My bigger question is how secure is it? Looks like low trust score new Russian website, what's the chance of malware or other attacks?

[–] BlueRingedOctopus@lemmy.dbzer0.com 7 points 1 month ago (6 children)

It gives you literal FLAC files, how are they gonna be malicious!?

People need to stop over analyzing things, its just a qobuz ripper, people who want to help the community provide them with Qobuz tokens that don't expire as often as Deezer, now they just rip from Qobuz on your request, as simple as that. Firehawk is also building a similar site from scratch.

[–] chirping 1 points 1 month ago

Well it's both possible, and has been done. both with mp3s and FLAC, not too long ago. It's not the format itself, but rather the applications parsing the files that are the target.

CVE-2023-37327: A remote code execution vulnerability in GStreamer’s FLAC file parser caused by an integer overflow. Carefully crafted FLAC files could exploit this flaw to run arbitrary code on the target system

https://nvd.nist.gov/vuln/detail/CVE-2023-37327#%3A%7E%3Atext=GStreamer+FLAC%2Ccode+on

load more comments (5 replies)

load more comments (6 replies)