Hacker News Reader

Webp has had major vulnerabilities.

https://blog.cloudflare.com/uncovering-the-hidden-webp-vulne...

which only strengthens my argument, webp seemed like some ad-hoc pet project in chrome, and that ended like most unsafe binary parsers, with critical vulnerabilities

> webp seemed like some ad-hoc pet project in chrome

FWIW webp came from the same "research group in google switzerland" that later developed jpegxl.

I now see that webp lossless is definitely from there, but the webp base format looks acquired from a US startup, was the image format also adapted in the swiss group?

Reply on news.ycombinator.com