Nice project folks!
Wondering if you all have had a formal code audit or pen-test of the LBC application and media player... seems like a lot of cool features and therefore attack surface to cover.
Do you all regularly perform security code reviews in the dev process or penetration test engagements on the app and/or infrastructure side?
I doubt the LBRY had ever done any formal code audit or pen-test as you said. But I believe @jiggytom could explain better. The only information about security I can find on the website is this:
https://lbry.io/faq/security.
The media player runs in a sandboxed environment, but precautions should always be taken with antivirus solutions. If you do find a way to exploit it, please let us know and we'll tip you!