There is a new linux program for watching tv from worldwide sources. The program is available from livestation.com. It is a 77k line open source bourne shell script. Is there any reasonable way to check it out for exploits?
Thanks.
Dave Feustel wrote:
There is a new linux program for watching tv from worldwide sources. The program is available from livestation.com. It is a 77k line open source bourne shell script. Is there any reasonable way to check it out for exploits?
If it were a 77,000 line shell script, there would be nothing reasonable about it. :)
It's not actually such a beast. It is a shell script that extracts the binary files and installs them. And it does not appear to be open source, so the answer to your question is: no, there is no reasonable way to check this software for exploits. The license agreement also has the standard proprietary boilerplate that states you may not reverse engineer, decompile, etc., the software.
I wouldn't bother with it. But then, I don't bother much with TV in the first place. ;)
On Thu, 2008-11-13 at 21:01 -0500, Todd Zullinger wrote:
Dave Feustel wrote:
There is a new linux program for watching tv from worldwide sources. The program is available from livestation.com. It is a 77k line open source bourne shell script. Is there any reasonable way to check it out for exploits?
If it were a 77,000 line shell script, there would be nothing reasonable about it. :)
It's not actually such a beast. It is a shell script that extracts the binary files and installs them. And it does not appear to be open source, so the answer to your question is: no, there is no reasonable way to check this software for exploits. The license agreement also has the standard proprietary boilerplate that states you may not reverse engineer, decompile, etc., the software.
I wouldn't bother with it. But then, I don't bother much with TV in the first place. ;)
Maybe run it inside a VM?
poc
On Thu, 2008-11-13 at 20:13 -0500, Dave Feustel wrote:
There is a new linux program for watching tv from worldwide sources. The program is available from livestation.com. It is a 77k line open source bourne shell script. Is there any reasonable way to check it out for exploits?
The channel list doesn't seem to include anything you can't just watch in your browser.
Is this any better than Miro, which actually *is* free software.
poc
On Thu, Nov 13, 2008 at 09:01:17PM -0500, Todd Zullinger wrote:
Dave Feustel wrote:
There is a new linux program for watching tv from worldwide sources. The program is available from livestation.com. It is a 77k line open source bourne shell script. Is there any reasonable way to check it out for exploits?
If it were a 77,000 line shell script, there would be nothing reasonable about it. :)
It's not actually such a beast. It is a shell script that extracts the binary files and installs them. And it does not appear to be open source, so the answer to your question is: no, there is no reasonable way to check this software for exploits. The license agreement also has the standard proprietary boilerplate that states you may not reverse engineer, decompile, etc., the software.
I wouldn't bother with it. But then, I don't bother much with TV in the first place. ;)
-- Todd OpenPGP -> KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp
Thanks for the info. I got rid of all my vcrs and tvs several years ago after developing the opinion that "tv is a bad influence". Every so often I sort of wish I could easily watch newsclips on Youtube, etc. using F9. But so far internet talk radio on Republic Broadcasting and Genesis Live have sufficed for me.
On Thu, Nov 13, 2008 at 09:49:46PM -0430, Patrick O'Callaghan wrote:
On Thu, 2008-11-13 at 20:13 -0500, Dave Feustel wrote:
There is a new linux program for watching tv from worldwide sources. The program is available from livestation.com. It is a 77k line open source bourne shell script. Is there any reasonable way to check it out for exploits?
The channel list doesn't seem to include anything you can't just watch in your browser.
Is this any better than Miro, which actually *is* free software.
Thanks for the tip about miro. I installed it but get the following errors when I run miro --help:
2/home/daf}miro --help WARNING:root:gtcache.init: setlocale failed. setting locale to 'C'
(miro.real:18896): Gtk-WARNING **: Locale not supported by C library. Using the fallback 'C' locale. Traceback (most recent call last): File "/usr/bin/miro.real", line 27, in <module> from miro import singleclick File "/usr/lib/python2.5/site-packages/miro/singleclick.py", line 50, in <module> from miro import item File "/usr/lib/python2.5/site-packages/miro/item.py", line 77, in <module> _charset = locale.getpreferredencoding() File "/usr/lib/python2.5/locale.py", line 512, in getpreferredencoding setlocale(LC_CTYPE, "") File "/usr/lib/python2.5/locale.py", line 476, in setlocale return _setlocale(category, locale) locale.Error: unsupported locale setting 2/home/daf}
Is there additional setup I should be doing?
Thanks.
Dave Feustel wrote:
Thanks for the info. I got rid of all my vcrs and tvs several years ago after developing the opinion that "tv is a bad influence". Every so often I sort of wish I could easily watch newsclips on Youtube, etc.
Eh? You can watch YouTube using gnash.
Matt Flaschen