[FFmpeg-devel] Forensics Was: [RFC] statictrac, trac and caching

[Derek Buitenhuis]

On 6/15/2025 4:58 PM, Michael Niedermayer wrote:
> I hoped someone just made a honest mistake with their AI agents.

Why are we assuming this is an AI agent and not a stupid DDoS?

> But if its a botnet
> why would a botnet target ffmpegs bug tracker ?

It is common on cybercrime forums to DDoS things to show your botnet
is legit when selling. You should read some Krebs.

> Its expensive (in terms of computations) to solve anubis repeatedly.
> A botnet is there to make some criminal a profit

Trac is an easy demo of their botnets abilities to solve Anubis or AI
load balancing or whatever, if I had to guess. Very low stakes, and
nobody is going to get police/states/FBI/whatever involved.

>> Publishing these seems in poor taste.
> 
> Publishing is neccessary a first step so people can check if anyone did this
> by mistake or if anyone knows where this came from.

So publish a /24 or something.

> Speaking of that. Do you have any idea, hunch or knowledge where this may
> have come from ?
> Or about anyone who might do this or pay a botnet operator to do this ?

Why would I?

- Derek