Alexander Burke - 2010-03-10

When using two-pass conversion, VideoMonkey creates its log file (actually ffpeg's) with a predictable file name (making a symlink attack possible):

/x264_2pass.log

And put your log in /tmp where it belongs, not / !