So the file format has 3 audio tracks (AAC VBR). What do you do with multiple audio tracks? You multiplex them, of course. The idea is to be able to read the file linearly and play back all three tracks as you go.
Show this thread
The Joysound Karaoke app for the Switch pulls in music from unencrypted HTTP CDN... and this file format is a perfect example of the kind of failure sadly common in Japanese software development.
-
-
-
Of course, there are already a zillion container formats available that will do this for you. But Japanese developers love to reinvent the wheel, so they did. Unfortunately, someone clearly knew *about* multiplexing but didn't *understand* it.
Show this thread -
I'm guessing someone was told to write some multiplexing tool. Unfortunately, the tool multiplexed the files in identically sized blocks. The files have a variable bitrate. this makes the multiplexing pointless, because the data is not synchronized *in time*.
Show this thread -
Now, if this happened, I'd expect the people responsible for writing the playback tool to complain (if they knew what to expect). Unfortunately, that would never happen in a Japanese company, because you don't want to make the other person lose face.
Show this thread -
So whoever wrote the playback tool just worked around it, completely negating the point of multiplexing. And what could've been a file format written in the right order, with audio at the end, that can be played and streamed linearly, now no longer can.
Show this thread -
Incidentally, the file format also mixes big-endian and little-endian sections. The audio section header is big-endian, but the mux frame headers are little-endian. So yeah, clearly multiple uncoordinated people involved.
Show this thread
End of conversation
New conversation -
-
-
It happening is a large company thing; it not getting *corrected* is a JP thing. I've seen people successfully argue in front of the team that objects are bad and only static methods should be used because it makes code "more greppable". Nobody dared say it was a ridiculous idea.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
So the real question is... Since you know the unencrypted CDN and the file format, is there a possibility this could this be used as a new exploit entry point?
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.