etchalon
Born on September 28, 2009•2830 Karma
It is not, and never was, an image format. It's a markup language.
Like opening a PNG in a new tab is harmless but opening an SVG in a new tab is opening a pretty substantial can of worms.
A malformed JPEG or PNG might have potential vulnerabilities but they are considered a failure of the browser or parser lib to mitigate.
An SVG however has vulnerabilities and those are directly built into the spec of well formed SVGs.
So users can view SVGs embedded in our site and they are regular vanilla SVG images. But say the user copies a link to this image (which we serve via our site or a CDN).
They share the image to a friend via URL and their friend clicks the link opening it directly in firefox or chrome. Now all the scripts in the SVG can execute and the image can rewrite the DOM to present itself as a fake website prompting them to log into their bluesky/atproto account to view the content. So said friend types their credentials in and the script in the SVG sends that back to their C&C server.
The answer to this shit is usually healthcare.
https://techcrunch.com/2026/04/14/how-the-rewards-app-freeca...
You'd think Apple would go after the top-charting apps that are leveraging the scam companies (like Monopoly Go and Disney Solitaire) for actively engaging with scams like this to pump their own numbers up...
(https://old.reddit.com/r/FreeCash/comments/1i4132r/monopoly_... - like this. What the everloving hell? Straight up enticing users to shove themselves into a game, expose themselves to ads galore, and then keep goading them into blowing even more money in the partner app under the guise of 'real cash'.)
They care about people pissing in their ocean.
It's just shocking when you see media company after media company go completely behind a paywall out of the blue when last week I was reading it with advertisements.
Now with news websites most people are running ad blockers. What are the news sites meant to do? Their employees are working, and they expect to be paid for that work. just like I expect to be paid for my job. Where is the money going to come from?
Advertisers are moving away from broadcast along with eyeballs.