Windows 10: Subtitles can be use to hack computers and media players

New kind of threat have been found by Check Point researchers. Media players (standalone and on computers), including popular ones like VLC, KODI and smart TVs, can be hacked by malicious subtitles.

Developers are already updating their applications with patches, but to update smart devices and media boxes will take some time, if ever.

Read more on blog.checkpoint.com | hacked-in-translation or your favorite news page.

:)

 

Windows 10 - Subtitles in Recorded TV WTV files.

I used Windows 7 Media Center to record a few thousands of DVB-T TV shows. Many of these show include Subtitles that can only be seen when played back in Media Center.

After upgrade to Windows 10 I can no longer see te Subtitles. Windows Media Player has some settings of Subtiles but no matter how the settings are adjusted I can not see the subtitles.

I have tried many other playerers but none could show the subtitles.

I have reverted to WIndows 7 for now.

Are there somebody out there that can help with this problem ?

Codec information summary:

Sound:

MPEG ACC Audio (mp4a)

Subtitles:

DVB Subtitles (dvbs)

Language Danish

Video:

H264-MPEG-4 AVC (part 10) (h264)

Thank You

 

my htc 8s windowsphone does not showing subtitles is there any way to show the subtitle

There is no player in the entire windows marketplace that allows you to load subtitles for the movies you are watching on the phone.



Luckily for all of us, VLC team is building a version of their popular VLC media player to windows phone 8. Once VLC comes to the app store, I am sure you can load subtitles and things like that. As of now, sorry, there is no solution.

 

just use a sandbox soft to isolate your medias/internet-facing apps and you wont have to worry about those attacks.

 

VLC released an update yesterday 2.2.6.

 

Do that with your TV *Sad

 

My TV isn't smart enough to allow subtitles *Biggrin

 

Neither is mine, but there are many that are *Wink And they are in home networks, and ideal entry to hack other computers...

 

Thanks for this warning Andre. I understand KODI have released an update to take care of this. Now to find the list of all the Fire devices that need updating......*Huh

 

I think that danger to English speaking population is far less serious than others. Key to prevent possible attack is not to have automatic subtitles loading enabled.

Beside non-major language users, like me in Slovenia, who are using subtitles on daily basis, there are also users with hearing problems, which are using auto-loading subtitles for all the visual material. This population should be careful, till developers update applications.

 

Hi there

a lot of this is rather "academic" -- especially if you run things like KODI on a firetv / firestick - there's nothing to hack on to that type of box way - although it's got an OS it's a passive type device with no meaningful data that is of any use to a hacker in any case.

Kodi and VLC regularly update their software and fixes already in the system.

For downloading subtitles - just ensure you only use recognized sites for subtitles - and ideally if they are of type .SRT they are readable text so should be OK. Go for .SRT type subtitles rather than the other sorts which could possibly contain executables.

I always use a fire stick / firetv box for watching multi-media but if you do use a phone / computer then your A/V system should protect you against this type of problem. ALWAYS though install the security updates when VLC / KODI issue new releases.

Tip for non English speaking users or users who want other languages.

Download the English subtitle (the .SRT file) as there's usually an English version available even when no other languages are.
Now simply use any of the online translation services (FREE) and you've got the subtitle in your own language. Fix / modify as required.

Note both KODI and VLC have "offset adjustments" to get subtitle in sync with the lips - kodi is easy as you can do it in real time while watching the movie.

Usually subtitles from opensubtitles.org or subscene.com are fine - use the appropriate frame rate and those with the 5 ***** rating usually work. AVOID THOUGH ANY RE-DIRECTS or other download buttons --ensure you actually download the subtitle and not something like driver manager etc etc.

Cheers
jimbo

 

Actually, I'm thinking that hacking Fire devices could be used the same like IoT (smart-home) devices - DDoS attacks.