jbk

51 ms·

811.
by jbk 13y ago
The full source code is provided and all the build script, see the beginning of 6.a. Any user can rebuild it.
812.
by jbk 13y ago
The new one has the HTTP server... I've added it...
813.
by jbk 13y ago
We are not happy yet on the quality of VLC for Android, so it is not out of beta. However, you can try yourself here: http://nightlies.videolan.org/build/armv7-android/VLC-debug-...
814.
by jbk 13y ago
This is because VLC 2.1.0 is now only in Beta :)
815.
by jbk 13y ago
See my blogposts on LGPL relicensing of VLC engine http://www.jbkempf.com/blog/post/2012/I-did-it Note that the relicensing was not done for the iOS port. And the app above the VLC engine is dual licensed GPL
816.
by jbk 13y ago
I wish we could do that, but it is really annoying to do, since it almost needs a special desktop app to do so. And the iDevice must be in the listening mode... Drag'n drop in the browser is the best we have so far. Maybe a later versi
817.
Infinit is a new simple file sharing app for OSX, using P2P(techcrunch.com)
42 points by jbk 13y ago|13 comments
818.
by jbk 13y ago
https://news.ycombinator.com/item?id=6019172
819.
by jbk 13y ago
You seem so good about Open Source teams management that you should join...
820.
by jbk 13y ago
That is a great question. Because we receive a LOT of emails, from PSI users and from clueless users telling us that our software is insecure. This is a lot of support load and takes quite a bit of time.
821.
by jbk 13y ago
It's always simple to give advise after the crisis... We had nothing to say publicly before, because those are security issues...
822.
by jbk 13y ago
Because VLC uses ffmpeg for some codec modules.
823.
by jbk 13y ago
> Then do so. And if you really feel the VLC project needs to respond to Secunia in any way, have someone else do it. You're not very good at it. I'm so glad that you volunteered... Seriously, do you have any idea how few we ar
824.
by jbk 13y ago
Publishing private emails is probably illegal too (it is in Germany, in France and Italy)... And claiming a POC is 'arbitrary execution' when it is not... We go that road for a long time, you know... I would prefer spending my fre
825.
by jbk 13y ago
No you are perfectly right. VideoLAN members and VLC developers are volunteers.
826.
by jbk 13y ago
> I care that you attempted to invoke the legal system over a dispute regarding a vulnerability. No, over defamation that they did in various public reports. Not about a vulnerability.
827.
by jbk 13y ago
> I don't even care who's right about the vulnerability, threatening legal action in a case like this is so beyond the pale At some point, you need to make them react. And the only way a small open source project can get an ans
828.
by jbk 13y ago
Yet http://secunia.com/advisories/52956/ calls it "Impact: System Access" and "Successful exploitation may allow execution of arbitrary code." Why wouldn't we be upset about that or call t
829.
by jbk 13y ago
Oh, yes, we agree on that. Which is why we patched FFmpeg for the SWF issue.
830.
by jbk 13y ago
The issue on the screenshot is an unhandled exception in the MKV plugin of VLC. It should not be exploitable, and has already been patched in months.
831.
by jbk 13y ago
Crashing does not mean exploitable. Moreover, it does not crash 2.1.0-pre1 and a work-around has been published (remove the libmatroska_plugin.dylib)
832.
by jbk 13y ago
> Videolan should fix the bug. All the vulnerabilities have been fixed. Which one are you referring to?
833.
by jbk 13y ago
All the known vulnerabilities have been fixed. Which one are you referring to?
834.
by jbk 13y ago
It is impossible to check the ffmeg-issue, without PoC (that they refuse to share) because they are so many that actually exist. Yet, they actually faked a report and lied about the Impact of the MKV issue...
835.
by jbk 13y ago
And this mkv file is, as far as I know, not an exploit. See http://seclists.org/fulldisclosure/2013/Jul/73
836.
by jbk 13y ago
Yep. This is exactly what is limiting me from recommending the tool to (non-geeky) friends, compared to Ghostery...
837.
by jbk 13y ago
> What does this actually mean? From what I understand, that they don't know what part of the Plan will be the one actually getting the most profit. And so they need to multiply their offers (and that increases the whole cost of the
838.
by jbk 13y ago
We've had the same issue on our page (VLC 93000+ likes), and we really thought it was a bug: the reply was above the question... We tried to remove and redo the comments, but it always ended like that. I'm glad to not be alone :)
839.
by jbk 14y ago
It has a very specific user agent, and does not call with this pattern.
840.
by jbk 14y ago
All over.

More ›