RIP

>>59295071
Dead?

>>59295071
DELETE

File: Screen Shot 2017-03-07 at 6.27.50 PM.png (383KB, 1616x1218px) Image search: [Google]

383KB, 1616x1218px

https://wikileaks.org/ciav7p1/cms/page_15729066.html

>>59295071
What happened?

>>59295178
Easy to use as a wrapper for nefarious CIA tools, DLL hijacking and other such deeds.

>>59295071
You leftout the part where it states the attack is on the portable versions. I saw a leak that pointed to many portable applications. I'll try to find it.

WHY CAN'T I HOLD ALL THIS HAPPENING

>>59295230
You dont really understand the leaks if that's what you think.

VLC was one of a dozen programs that are used as a wrapper for an attack. It isn't IN VLC by default, it's simply easy as fuck to add an attack into it however.

FONT CACHE IS BEING REBUILT; PLEASE WAIT [inf] MINUTES

>>59295278
>open anime
>VLC hangs for 3.5 hours
This is 45% the reason I don't watch anime

>>59295293
>not using MPV or MPC-HC

well you're a retard anyway

never used it. don't care

>>59295071
they should make a md5 validation at least, of all the files post install, and when you open the program

>>59295071
Fucking /pol/ on meltdown again. I wanted to talk about my shitty country's upcoming election.

>>59295337
>they should make a md5 validation at least
What's the point? There was already an attack used in 2012 which used an MD5 hash to fool windows into thinking it was running an official Microsoft signed program.

If it's been possible to actually break in the wild since ~2012, you can assume dozens, if not hundreds of people by this point could do the same.

SHA-2 is heading that way too within the next few years considering SHA 1 was just demonstrated to be broken in practice.

>>59295135
GOD DAMN CIA NIGGERS!!! Everyone go on Temple OS now. It's our only hope.

>>59295431
>implying the networked version of TempleOS wasn't made by the CIA

I haven't used VLC since Windows XP is my identity and 2006 anime safe??

>>59295347
shut up, emilio

>>59295444
>implying he was referring to the networked version

>>59295071


No joke, I uninstalled my copy today after 5 years of ignoring 4chan arguments against it

>>59295461
Your anime is fine but your megahurtz are gone and they ain't coming back.

just use it with microsoft EMET

but yeah... VLC is terrible when it comes to security, and the devs just don't care

>>59295303
>using windows exlusive software
And you're calling him a retard? Fuck off

>>59295413
This is why most rational people use more than 1 checksum algorithm per file. You might be able to fool a single checksum algorithm, but it would be computationally impossible to pull that off where multiple are involved.

>>59295293
What kind of shitty computer do you have?

>>59295762
>windows exlusive software
Holy shit, he's retarded.

>MPV
>https://mpv.io/
>OSX, Linux, BSD, Windows

>work for the government
>be a maintainer for a popular binary-release Linux distro
>distribute backdoored software
Your ass is grass faggots

>>59295810
Way to ignore the part where you clearly recommended MPC-HC which is windows only software. You intellectually dishonest piece of shit

>>59295820
And this is why I use Gentoo instead of Arch Linux despite the fact that I prefer Arch Linux.

>>59295837
Yeah how dare I offer multiple options that will work on multiple platforms.

If you're on windows, obviously my recommendation would be MPV.


Are you really this confrontational? Did mommy cut your tendie budget for the month?

>>59295820
Void?

>>59295860
>If you're on windows, obviously my recommendation would be MPV.
Clearly not, because you just recommended MPC-HC. Are you literally brain damaged? Seriously, how fucking stupid can you be you goalpost moving retard

>>59295071
>>59295135

isn't VLC an open source program? how did this sneak in with no one noticing?

>>59295135
Did anyone even read this?
Looks to me like:
>Spy has modified VLC (isn't it open source?)
>goes to work, appears to be using VLC
>collection going on in background
>Spy gives full flash to agent, gets a new one to steal more info.

It doesn't say installed VLC is being exploited

>>59295904
Wew

You know what I meant you massive cock gobbling semen demon.


>If you're NOT on windows

Amazingly enough, most of us here past highschool age have managed to get advanced enough with our understanding of written english to read past what the individual words say and pick up on contextual clues that set the tone and deliver the message.


>>59295915
Because as has been said multiple times in this thread but since half of you faggots have no understanding of how any of these exploits work telling you again wont change anything. IT'S A SIMPLE WRAPPER. VLC, is one of dozens of programs used. They're modifying it FROM the source, and THEN deploying it selectively against targets.

It's not like they've gone into the source code of ALL VLC installs and installed some backdoor, that would be stupidly easy to see.

>>59295983
>Amazingly enough, most of us here past highschool age have managed to get advanced enough with our understanding of written english to read past what the individual words say and pick up on contextual clues that set the tone and deliver the message.
nice run-on sentence moron.

>>59295293
What about the 55%?

>>59295071
>asset
>civilians aren't even considered human beings

):<

That's it, I'm no longer jerking off with the front cam on. They'll just have to settle for my slender legs and feet.

>>59295071
Are MPV shills targetting VLC now too?

File: 01murderfacepours.gif (62KB, 294x238px) Image search: [Google]

62KB, 294x238px

>>59295071

>>59295071
just installed mpv, it's pretty tight

>>59296142
pic related >>>59295951

>>59295837
>Way to ignore the part where you clearly recommended MPC-HC which is windows only software.

As a Windows users, this matters why?

>>59296169
Because it demonstrates that he was lying

>>59295955
Don't bother, people here doesn't care about the truth.

>>59296165
Fuck off, you're STILL upset that OGM files which haven't been used, EVEN by the OPUS group, in over a decade dont work properly?

Jesus you MUST be getting paid by someone, if you're this autistic on your own I seriously have to wonder how you made it this far in life.

>>59296186
Lol? Lying about what?

>>59296186
You threw a shitfit because he was recommending two pieces of software. Let it go, you autist.

>>59296201
He implied that he didn't recommend any windows exclusive software and then tried to move the goalposts when I called him out for it. are you retarded?

>>59296220
He gave two options and then you turned autistic.

Wow, you really are autistic if you're doubling down on this.

>>59296217
>lacking comprehension
No, I specifically called him out for recommending a piece of Windows-exclusive software. Only retards use Windows for personal use.

>>59296239
Literally 99% of all personal computers run windows.

You need to stop pretending

>>59296189
Well, ogm files work in literally every single other player I've tested them with, including libmpv based players. MPV player is doing something very wrong.

>>59296254
>Literally 99% of all personal computers run windows.
Yeah, and literally 99% of all people are (figuratively) retards (more than that really...)

>>59296239
and you threw a shitfit over it. let it go, you autist

>>59296239
No, you threw a shitfit because someone recommended something other than MPV, you dumb fucking shill. Grow up,.

>>59296281
Why would I let it go when I'm still getting a reaction out of you? You must be GNU here.

>>59296254
>monkey see monkey do

why would I care about the normie's choice?

>>59296260
OGM files shouldnt be used by ANYONE to begin with. OGMs were never even officially supported by Opus.

OGM files were created as a hack to get video in OGG. It was never officially supported, and replaced by OGV officially from the Opus group.


I don't care what other video players do with it, using it as an example of WHY a video playback program is "broken" is so beyond retarded I don't have a word to describe just how retarded it is.

>>59296303
I don't even like MPV. It's shit. See my post >>59295951 you retard

>>59296320
Dunno. Why would you care enough to comment on it, idiot? And if you're not that guy, then just fuck off, why are you even replying.

>>59296330
Oh good, so you ARE the same autist who has been throwing a shit fit about MPV and OGM for over 2 months now.

>>59296308
>I was just pretending to be retarded
literal damage control

>>59296355
No you're thinking of Alex. I only started carrying the torch over the last couple weeks or so.

>>59296359
No, you are still a retard for recommending windows-exlusive software. The fact that I am continuing this conversation in order to get a rise out of you is completely independent of that. But of course, I wouldn't expect a moron like you to understand that.

>>59296372
Anyone who thinks it's a valid argument is deficient of brain-cells.

>this random file format which was never even officially supported by the container from 15 years ago doesn't work in my CURRENT YEAR video playback software


Fucking autistic

>>59296330
What is your media player of choice if not MPC or MPV then? Surely you can't be dumb enough to still be using VLC, can you?

>>59296382
>you are still a retard for recommending windows-exlusive software
wasn't me retard. I've been letting the other posters bash you since you're obviously a moron.

>>59296382
>throwing a shitfit because somebody recommended a software you didn't like
literal autist

The CIA nigger successfully derailed this thread.

>>59296410
You can't derail a thread that was never on track in the first place.

>>59296392
No I don't use VLC either. Pretty much any libmpv based player that isn't MPV player seems to work great. I usually recommend Baka-Mplayer. I was using Bomi for awhile, but they actually forked the mpv project rather than utilizing libmpv.

>>59296399
>wasn't me
Sure buddy. I totally believe you too.
>inb4 shooped screenshot displaying lack of (You)

>>59296427
So tell me, why are you such an autist? Throwing so much of a shitfit over something so trivial? Are you angry about something? Show us on your dick where Windows touched you.

File: fuck off.webm (653KB, 693x698px) Image search: [Google]

653KB, 693x698px

>>59296427
>>inb4 shooped screenshot displaying lack of (You)
don't worry, I took a webM and refreshed the page to show just how retarded you are.

>>59296472
Honestly I get enjoyment out of trolling people on /g/. Isn't that why pretty much everyone comes to 4chan? If I wanted to have a real discussion I would go to some highly specific subreddit.

>>59296555
>highly specific subreddit
newfag detected.

I've been on /g/ since it was /g/uro. When it first became technology it was actually a great place for indepth technical discussions.

you and others like you have ruined it over the years.

>>59296555
>I was only pretending to be retarded
>I admit to browsing reddit
Thanks for contributing to the vicious cycle of making this place eternally shit

File: 14758626576151.jpg (55KB, 495x455px) Image search: [Google]

55KB, 495x455px

>this nigga has been having a tantrum for almost an hour because someone dared to recommend something not available on linux
Honestly one of the most autistic threads of 2017 so far

>>59296480
that's actually an impressive thing to do within ~3 minutes of his post.

>>59296573
I've been browsing 4chan for 12 years, so don't give me that bullshit. 4chan has always been shit. The "4chan used to be good" meme a lie. Also, everyone knows only newfags call other people newfags.

>>59296611
>The "4chan used to be good" meme a lie
wew, actual newfag 100% confirmed. If you don't remember the good days, you weren't here 12 years ago.

CP, credit cards, live suicides, etc.

>>59296611
>I've been browsing 4chan for 12 years, so don't give me that bullshit
Only newfags try to get validation by stating the number of years they've allegedly been browsing here

File: serveimage.jpg (34KB, 680x544px) Image search: [Google]

34KB, 680x544px

>>59296480
wow I guess you win. good job buddy.

>>59296604
How so? It's not like creating a webm takes a lot of skill or is a time consuming process.

>>59296694
No, but to do it within 3 minutes shows it isn't shopped or fucked with, it's just a straight webM proving the other dude wrong.

Quality post.

>>59296595
And yet you are still replying for some reason. Were you perhaps dropped on your head as a child?

>>59296584
Dude, how can you seriously be that easy to troll? In the same sentence I told you what I was doing. Do you honestly think I don't know that /g/tards react that way towards "le plebbit". Jesus christ you are retarded.

>people keep getting baited

>>59296741
and you're still going to complain that this place is shit while contributing to its shittyness
thanks faggot

FUCK VLC NOW

>>59296786
That's because there are better forums for discussion. 4chan is just not a good format for that.

>>59296816
inb4 he gets baited again

>>59296816
Then return from whence you came, you'll find no karma here

I'm going to add this to the list of types of troll if it's not already. I'll call it the "transparent troll"

>>59296850
I don't reside on any particular part of the internet. I go wherever I want. The fact of the matter is that /g/ is only a good format for literal shills and trolls.

>>59296930
>Complaining about trolls while being a troll
That's like complaining about a robbery infestation in your area while you're doing the same.

>>59297021
I'm not complaining about trolls though. I'm stating fact that anonymous image boards are better suited for trolls and shills than they are for regular users. I have no problem with this website being shit. I take advantage of it. Different tools for different jobs.

>>59297021
He trolling, you supreme idiot

>>59297074
lol the timestamps make us look like samefags

and that is how you kill a thread

>>59295214
So nothing

>>59297248
In regards to VLC being compromised or it's developers being implicated in anything nefarious? Correct. It's nothing.

It's literally just one of several common programs used as a way to hide their own code that they build in their OWN versions that are used for specific attacks. This is not baked into the source of ALL VLC code or anything like that.

File: vlc.gif (1MB, 320x240px) Image search: [Google]

1MB, 320x240px

>>59297248

File: 1464641787930.jpg (97KB, 807x1300px) Image search: [Google]

97KB, 807x1300px

>>59295955
I tend to agree this is just usual /g/ autism over nothing.

Doesn't exactly sound like a hacking revelation either. Mod an open source program to dump files of a certain extension on a flash drive? The CIA paid someone to write this garbage.

Also makes me think of what situation this sort of thing would actually be useful. Wouldn't it be just as much effort to run a batch file for command prompt and have the terminal minimized? It's not like a high security organisation is going to allow some random employee to "listen to music on VLC" while they're on some super secure local network.

>>59297350
>It's not like a high security organisation is going to allow some random employee to "listen to music on VLC" while they're on some super secure local network.
I work for a major corporation, and while I don't work in the security department, I do have access to a fuck ton of stuff including all the code for every project in my subdivision of the company, as well as tons of "sensitive data" my company distributes for various other major corporations. I could listen to music on VLC all day long at work while accessing all kinds of things. However, as you said, it would be easier to run a Bash script in a terminal. The difference though, is that it would take some pretty intense inspection of the VLC binary to discover what it's secret purpose is. The Bash script, if discovered, would be very obvious if anyone did for some reason end up with their hands on it.

>>59297473
....keep script on the flash drive?
....include commands to cover any tracks of the script being executed on the target PC?

I mean, once they find the flash drive with the gigabytes of top secret stolen files you're fucked regardless if they decide to perform autopsy on your VLC portable and Nickleback rips or not.

>>59295107
It's vulnerable to the CIA tools.

Those kewl movies are botnet.

press S to spit on its grave

S

File: EQU2Q5K.jpg (53KB, 708x446px) Image search: [Google]

53KB, 708x446px

>>59295071
psssh who uses VLC? I watch stuff on my new Samsung smart TV

>>59295135
what does this mean

File: 5355320+_7af2ee477b33f1e63b966b0b165654aa.jpg (13KB, 300x239px) Image search: [Google]

13KB, 300x239px

>>59295431
>Everyone go on Temple OS
> tfw you finally understand why it's Temple OS.
God Bless Terry.

>>59299427
So you have some target company or person.
- You give your guy a prepared "VLC Player" pendrive.
- He uses it to listen to music or radio at the workplace, run it always, because well, music.
- The program itself does much more than play music, it collects and encrypts data meanwhile to the portable drive.
- Once it's filled, the guy gives it back, gets a new """VLC player""" drive.

>>59300183
By the way, I am amazed by the amount of data they can process.
I mean just imagine. They have so many fucking tools, no server could hold it alone.

And they collect literally everything around the world.
It's an awesome, amazing, breathtaking amount of data.

And they manage to process it.
That's the part that dazzles me.

HOW?!

>>59300196
More
CORES

I hate vlc personally but in their defence there is nothing wrong with them its not their fault

the public version is fine

"Well no. The public version of VLC is fine. They made this tool to install into the VLC's of machines they had access to. Then at configured to collect data. It is not on everyone's copy of VLC :/"

not before time too

File: 1473835710079.jpg (128KB, 879x705px) Image search: [Google]

128KB, 879x705px

>>59297350
you have to understand the people who write/mod these programs are not the people who end up using them. it's meant to be employed by field agents who might not be any more tech literate than the average macfag.

File: checksum_icon_256px.png (9KB, 256x256px) Image search: [Google]

9KB, 256x256px

>>59295337
>Not understanding checksums
>Thinking they are magic
not getting that all checksums do is basically this
Your program is number 46783
Get the last digit checksum = 3
Someone knows this and writes a program that is the number 888883 the algorithm returns checksum = 3

The same can be made for every check sum!
You literally need a full copy to do a full comparison to be safe.

Some algorithms might be harder to understand however this is only security by obscurity.

If you have fallen for the checksum meme you are a idiot and deserve everything you get.

>>59295071
What about MPV? It's my player of choice

>>59300196
Maybe they just want you to think they can do all of that.

File: a5fd9f50473ea78ab4a5668771803996dfaebe931facffc060a9c530337dc7e7.jpg (77KB, 625x625px) Image search: [Google]

77KB, 625x625px

>>59295254
>>59295983
I don't think you know what a wrapper is

>>59295254
This, it's used by agents who modify VLC, plug in a flash drive on the target machine and infect it.

>>59301555
Good to know you have literally no idea how cryptography and number theory work. If you believe what you wrote then I hope you don't believe that encryption works

File: morpheus-002.jpg (121KB, 1279x548px) Image search: [Google]

121KB, 1279x548px

<< pick related

>>59301908
It's obviously FSB/Russia.

So now every single computer in the world that has VLC in it is backdoored via VLC? Thatdoesn't sound plausible

>>59302335
Because that isn't what happens and it just goes to show you didn't even bother to more than read the first post in this thread.

>>59297278
>>59295254

i was a vlc fan for years until about one month ago when i decided that i shouldnt have to wait 3 whole seconds for a video player to load in 2017. I also wanted a borderless video player so i switched to Potplayer as my main and i use MPC-HC as a backup.

>>59295444
>implying the normal templeOS wasnt created by a CIA surrogate

>>59295479
>implying that he wasnt implying about the networked version

WHATEVER BECOMES THE NEXT WILL BE BUGGED TOO

>>59302335
yes

i'd still rather use vlc than mpv

>>59295071
Joke's on the CIA, I stopped using that media player years ago because its trash.

MPV master race

File: huh.png (127KB, 467x333px) Image search: [Google]

127KB, 467x333px

>>59295721
>video players need security

They are using VLC to sideload DLL's similar to how they sideloaded TrueCrypt for example. It is not so much a weakness of VLC or TrueCrypt but rather an example of how shit Windows is.

>>59300298
>amds biggest customers are three letter organizations