Weblog on the Internet and public policy, journalism, virtual community, and more from David Brake, a Canadian academic, consultant and journalist
28 February 2002
Filed under:Uncategorized at10:09 am

If like me you thought MP3s didn’t present a security risk to your PC, think again. It turns out that you can create music files in Real Player or Media Player format that spawn lots of pop-up windows and run scripts from the player, then rename them as MP3 and they will still be loaded and run as intended.

It is not clear whether these ‘pretend MP3s’ could be dangerous or just annoying but it is enough to make you a little worried. Of course if, like me, you use a less common application like Musicmatch to play your MP3s you shouldn’t have that problem unless someone writes something to take advantage of that program.about teens religionsexual stories a10 positions best sexsex life 2nd videosabsolutely free sex98226 sexy ladieschat phone 1 sex to1mountainaire by 2004 essex Map

2 Comments »

  1. Are they *really* renamed as “.mp3”? Or are they named “.mp3.vbs”, or perhaps [my favorite] “.mp3 .vbs”? perhaps you have file name extensions turned off? If so, shame on you.

    Of course Mac and Linux users have none of these problems with mp3s. QuickTime movies, on the other hand, are quite capable of bringing up pop-up [or pop-under] web pages, other movies, etc, etc, and don’t even have to deviate from the QuickTime movie file format to do it!

    Comment by Reid Ellis — 28 February 2002 @ 6:54 pm

  2. I don’t think they are VBSes though I am familiar with that trick. I think this is “cleverness” on the part of the players where they see a file called “MP3” but they just know it is supposed to be in their own format so they add in the annoying bits they are supposed to just as QT does.

    Comment by David — 28 February 2002 @ 7:14 pm

RSS feed for comments on this post. TrackBack URL

Leave a comment