Connect with us

Featured

Hacked in translation

Published

on

Check Point researchers have discovered a new attack vector that could allow hackers to create malicious subtitles to target users of popular media platforms to gain complete control of users’ PCs, mobiles, and smart TVs.

Check Point security researchers have revealed a new attack vector threatening hundreds of millions of users of popular media players, including VLC, Kodi (XBMC), Popcorn Time and Stremio. By crafting malicious subtitles, which are then downloaded by viewers, attackers can potentially take complete control of any device running the vulnerable platforms.

“The supply chain for subtitles is complex, with over 25 different subtitle formats in use, all with unique features and capabilities,” said Omri Herscovici, vulnerability research team leader at Check Point. “This fragmented ecosystem, along with limited security, means there are multiple vulnerabilities that could be exploited, making it a hugely attractive target for attackers. We have now discovered malicious subtitles could be created and delivered to millions of devices automatically, bypassing security software and giving the attacker full control of the infected device and the data it holds.”

Check Point’s research team tested and found vulnerabilities in four of the most popular media players: VLC, Kodi, Popcorn Time and Stremio, and followed responsible disclosure guidelines to report the vulnerabilities. By exploiting vulnerabilities in these platforms, hackers were able to use the malicious files to take over the devices playing the media.

The subtitles for films or TV shows are created by a wide range of subtitle writers, and uploaded to shared online repositories, such as OpenSubtitles.org, where they are indexed and ranked. Check Point researchers also demonstrated that by manipulating the repositories’ ranking algorithm, malicious subtitles can be automatically downloaded by the media player, allowing a hacker to take complete control over the entire subtitle supply chain without user interaction.

Since the vulnerabilities were disclosed, all four companies have fixed the reported issues. Stremio and VLC have also released new software versions incorporating this fix. “To protect themselves and minimize the risk of possible attacks, users should ensure they update their streaming players to the latest versions,” concluded Herscovici.

VLC has over 170 million downloads of its latest version, released June 5, 2016. Kodi (XBMC) has reached over 10 million unique users per day, and nearly 40 million unique users per month. No current estimates exist for Popcorn Time usage, but it is estimated to be tens of millions. Check Point has reason to believe similar vulnerabilities exist in other streaming media players.

Featured

Load-shedding leads
local searches

South Africans are searching in the dark, according to the latest Google Search trends.

Published

on

With more 1 million search queries generated in the space of 76 hours, load-shedding was by far the top trending search on Google South Africa this week.

Valentine’s Day came a distant second.

After news emerged last Sunday of the impending stage 3 load shedding, South Africans had generated more than 1-million load-shedding search queries by the time Tuesday came around:

  • “Loadshedding schedule” – generated more than 100k searches on Sunday
  • “Load shedding schedule” – generated more than 100k searches on Sunday
  • “Eskom load shedding” – generated more than 100k searches on Sunday
  • “Load shedding Cape Town” – generated more than 50k searches on Sunday
  • “Load shedding schedule” – generated more than 400k on Monday
  • “Load shedding Johannesburg” – generated more than 20k searches on Monday
  • Load shedding schedule” generated more than 200k search queries on Tuesday

Leading up to Valentine’s Day, South Africans generated close to 300k search queries related to the romantic festival, including searches for quotes and gift ideas:

  • “Valentines Day” generated more than 100k search queries on Thursday
  • “Happy Valentines Day Images” and “Valentines Day Images” generated more than 10k search queries each on Thursday, with “Happy Valentines Day 2019” generating more than 20k search queries on Wednesday
  • “Valentines Day Specials 2019” generated more than 5k search queries on Thursday
  • “Love quotes” generated more than 5k search queries on Thursday
  • “Valentines Day quotes” generated more than 100k search queries and “Valentine messages” generated more than 50 000 search queries on Wednesday

Search trends information is gleaned from data collated by Google based on what South Africans have been searching for and asking Google. Google processes more than 40 000 search queries every second. This translates to more than a billion searches per day and 1.2 trillion searches per year worldwide. Live Google search trends data is available at https://www.google.co.za/trends/hottrends#pn=p40

Continue Reading

Featured

Showmax invites
student films

Published

on

Thanks to the growing popularity of video-on-demand services, there’s a new opportunity to help kickstart the careers of local filmmakers.

Numerous Hollywood blockbusters (District 9Tomb Raider 2018, and The Avengers: Age of Ultron to name a few) have featured substantial shoots in Johannesburg and Cape Town. While providing great opportunities for SA’s production talent, aspiring writers and directors don’t get the same benefit.

So where can local creatives showcase their work? Broadcast TV isn’t a natural home for unknown short films, and while self-publishing platforms are readily available hosting options, it’s tough to get noticed and get traffic when competing with videos from across the planet.

But with the emergence of video-on-demand services into the mainstream, there’s now a solution. The African film school AFDA has teamed up with the streaming service Showmax to give local talent a much larger platform than ever before. From 18 February, eighteen of the best recent short films made by AFDA students from their Johannesburg, Cape Town, Durban and Port Elizabeth campuses will be live on Showmax. Drama, documentary, fantasy, and animation are all represented, in pieces running from under eight minutes to almost half-an-hour long. The full list of movies is included below.

Teresa Passchier, CEO of AFDA, said: “AFDA, Africa’s number-one school for the Creative Economy, is proud to kickstart this exciting and meaningful journey with Showmax and AFDA students, ensuring emerging young African filmmakers’ voices are heard and given a platform. It’s ground-breaking to share young, local, culturally relevant content on the same platform as Hollywood blockbusters. I am certain that this unique initiative will serve to boost and develop the African film industry and the careers of many young South African and African students alike.”

Included in the short films coming to Showmax are the award winners Junior and O-PunchaJunior, directed by Bert Dijkstra, picked up the Audience Award in the Made in South Africa Competition at the shnit Worldwide Shortfilmfestival Awards 2017. O-Puncha, directed by Adam Hansen, won two awards at the 5th annual Eldorado Film Festival: Best Student Made Short, and Best Editing – Alexander La Cock.

Another celebrated film is Sicela Amanzi directed by Mlu Godola, which talks to the subject of water shortage. The film’s heroine Zoleka is a mild-mannered young woman forced to go to extreme lengths when a small community’s only source of water unexpectedly collapses. The power of films like this is they shine a light on critical topical issues in new ways.

Speaking about working with the film school, Candice Fangueiro, Head of Content for Showmax, said: “There’s immense depth of filmmaking talent in Africa and it’s a privilege to be able to give that talent a home and a platform. Showmax is becoming part of the fabric of film and TV production in Africa, and importantly we’re doing this as a partner rather than just as a consumer. This is a key competitive advantage of being local and something we aim to continue to work on.”

AFDA is an Academy Award-winning institution, founded in 1994, and the first and only African film school to win an Oscar – for the Best Foreign Student film in 2006, the postgraduate film Elalini, directed by Tristan Holmes.

The full list of AFDA short films coming to Showmax is as follows:

Film titleDirectorGenre
Lullaby from the CryptKeenan Lott & Raven DavidsAnimation
Ko Ga CherenyaneSibonokuhle MyatazaDocumentary
IzilwaneKyllian RouxDrama
MallemeuleJaco Van BoschDrama
Canal StreetBrodie MuirheadDrama
On the FenceWarrick BewsDrama
The Righteous FewLindo LangaDrama
Hlogoma PeakLuke AhrensDrama
Frozen FlameCameron HeathmanAnimation
WolfBrett van DortFantasy
The Walk HomeSisanda DyantyiDrama
BearWesley RoodtDrama
JuniorBert DijkstraDrama
O-PunchaAdam HansenDrama
UmngenoSiphosethu NdungeDrama
DoreenLuvuyo Equiano NyawoseDrama
ForeverLindo LangaMusical
Sicela AmanziMlu GodolaDrama

Continue Reading

Trending

Copyright © 2018 World Wide Worx