VideoLANOvěřený účet

@videolan

Official tweets from the project, and the community.

videolan.org
videolan.org
Připojil se listopad 2009
127 fotek nebo videí Fotky a videa

Tweety

Zablokovali jste uživatele @videolan.

Opravdu chcete tyto tweety zobrazit? Zobrazením tweetů nedojde k odblokování uživatele @videolan.

  1. Připnutý tweet
    24. 7.

    About the "security issue" on : VLC is not vulnerable. tl;dr: the issue is in a 3rd party library, called libebml, which was fixed more than 16 months ago. VLC since version 3.0.3 has the correct version shipped, and did not even check their claim. Thread:

    74 replies 3 068 retweetů 4 087lajků
    Zobrazit toto vlákno
    Zobrazit toto vlákno
    Vrátit
  2. 2. 8.

    VLC for Android has a new beta version, 3.2.0 beta2: numerous updates in the interface to make it more usable and fixed in the backend! Register on

    9 retweetů 27lajků
    Vrátit
  3. Retweetnuto uživatelem
    31. 7.

    We are excited to announce for . Learn all about building Crossplatform Multimedia Apps! Make sure to save your stop, we have limited availability!

    5 retweetů 12lajků
    Vrátit
  4. 31. 7.

    Of course, the Safari demo is using dav1d in Wasm! cc

    1 reply 2 retweety 18lajků
    Zobrazit toto vlákno
    Zobrazit toto vlákno
    Vrátit
  5. 31. 7.

    AV1 live encode and playback demo at AV1 in (ARM+x86), , , Safari and VLC, all using dav1d. Encoded live with SVT-AV1 in (360p to 1080p) format.

    7 replies 39 retweetů 175lajků
    Zobrazit toto vlákno
    Zobrazit toto vlákno
    Vrátit
  6. 26. 7.

    As some of you suggested, we are going to try the process to become our own CNA for VLC (and maybe some other multimedia libraries). This should avoid issues like the one we just had.

    14 retweetů 100lajků
    Vrátit
  7. Retweetnuto uživatelem
    25. 7.
    Odpověď uživatelům

    libebml vulnerability has been fixed, for Ubuntu 18.04 users. A good "sudo apt update" & "sudo apt upgrade" will fix it.

    3 retweety 23lajků
    Vrátit
  8. Retweetnuto uživatelem
    25. 7.

    Perfect illustration of talk of JB Kempf from about toxicity of some of the infosec community members (VLN reporters, institutions, companies, media). We HAVE TO FIX our community, NOW. Slides: /video: RT please

    About the "security issue" on : VLC is not vulnerable. tl;dr: the issue is in a 3rd party library, called libebml, which was fixed more than 16 months ago. VLC since version 3.0.3 has the correct version shipped, and did not even check their claim. Thread:
    Zobrazit toto vlákno
    30 retweetů 49lajků
    Vrátit
  9. Retweetnuto uživatelem
    25. 7.

    VLC wasn't vulnerable after all, and some reporters failed to do their homework. We saw headlines like "You Might Want to Uninstall VLC. Immediately."

    Update: Bug is closed, was a third-party lib that the reporters forgot to update. VLC was ultimately unaffected. Will we see any retractions from the media? Of course not.
    Zobrazit toto vlákno
    59 retweetů 178lajků
    Vrátit
  10. Retweetnuto uživatelem
    24. 7.

    VLC developer debunks reports of ‘critical security issue’ in open source media player

    41 retweetů 64lajků
    Vrátit
  11. Retweetnuto uživatelem
    24. 7.

    What's liability? Well, they may issue a 'we are sorry' tweet. While will have to deal with the mess for a couple of months (if not years). Nice job, MITRE!

    For whatever reason, unknown to us, decided to issue a CVE, without talking to us. This is in direct violation of their own policies,
    Zobrazit toto vlákno
    16 retweetů 39lajků
    Vrátit
  12. Retweetnuto uživatelem
    24. 7.

    For the record, the bug was in libebml 1.3.5. It was fixed in libebml 1.3.6 which was released on 2018-04-20. It is included in official VLC builds since 3.0.3.

    About the "security issue" on : VLC is not vulnerable. tl;dr: the issue is in a 3rd party library, called libebml, which was fixed more than 16 months ago. VLC since version 3.0.3 has the correct version shipped, and did not even check their claim. Thread:
    Zobrazit toto vlákno
    34 retweetů 65lajků
    Vrátit
  13. 24. 7.

    Would behave the same way if we were Microsoft or another big company? But no, we're just a small non-profit, that does not even have the money to pay someone fulltime... End-of-thread.

    27 replies 94 retweetů 801lajků
    Zobrazit toto vlákno
    Zobrazit toto vlákno
    Vrátit
  14. 24. 7.

    And to finish, both NVD and were contacted more than 12 hours, (7pm CET) and we still are waiting for an answer, while is asking us for clarifications...

    33 retweetů 306lajků
    Zobrazit toto vlákno
    Zobrazit toto vlákno
    Vrátit
  15. 24. 7.

    joined of course, with the ridiculous "60%" of the fix is done, which is what the reporter added in the public bugtracker...

    8 replies 38 retweetů 320lajků
    Zobrazit toto vlákno
    Zobrazit toto vlákno
    Vrátit
  16. 24. 7.

    It is still on the frontpage. If you are working at , are you not a bit ashamed?

    11 replies 117 retweetů 693lajků
    Zobrazit toto vlákno
    Zobrazit toto vlákno
    Vrátit
  17. 24. 7.

    You can bet that noone of them will correct their article, or it will be in a small subtweet somewhere hidden.

    32 retweetů 346lajků
    Zobrazit toto vlákno
    Zobrazit toto vlákno
    Vrátit
  18. 24. 7.

    and then, of course, decided to play the clickbaiting of "Uninstall VLC now, or you are all going to die". Of course, did not contact at all to check their info. And then, we got hundreds of article about VLC insecurity.

    7 replies 146 retweetů 673lajků
    Zobrazit toto vlákno
    Zobrazit toto vlákno
    Vrátit
  19. 24. 7.

    So, when decided to do their "disclosure", all the media jumped in, without checking anything nor contacting us.

    28 retweetů 291lajků
    Zobrazit toto vlákno
    Zobrazit toto vlákno
    Vrátit
  20. 24. 7.

    And of course, did not contact us for clarifications.

    1 reply 22 retweetů 266lajků
    Zobrazit toto vlákno
    Zobrazit toto vlákno
    Vrátit
  21. 24. 7.

    Then, this time, for whatever reason, decided to do an advisory , without checking either the crash (it's not hard), or the vulnerability, or even contacting us.

    5 replies 34 retweetů 322lajků
    Zobrazit toto vlákno
    Zobrazit toto vlákno
    Vrátit

Uživatel @videolan ještě neposlal žádný Tweet.

Načítání se zjevně nějak vleče.

Možná je překročena kapacita Twitteru nebo došlo k momentálnímu zablokování. Zkuste to znovu nebo se podívejte na stavovou stránku Twitteru, kde najdete další informace.

    Také by se vám mohlo líbit

    ·