@hrbrmstr@mastodon.social I mean, this is funny, but the ImageMagick stack has never been about security. I recall in the maybe early 2000s they’d said ~ “why should we care about bounds checking? Write whatever you want wherever you want. Real images will display on a reasonable canvas and you can ignore the rest” It’s been a long time since I read that, and I can’t find the source, but the audacity made a long lasting impression on me.