Recherche avancée

Sur d’autres sites (16929)

• Is there risk of shell/command injection when using FFmpeg or when there's no user input ?

  10 mai 2021, par Tris

  I am new when it comes to thinking about the security of my web applications. I have done research on shell injections and most of the time they say to just avoid using shell/command calls in the web applications. However, my alternative seems to limit which browsers clients can use. So I would prefer executing a shell command in my nodejs server. I am using FFmpeg and calling it through system command in nodejs child processes.

  


  I have a FFmpeg bash script like so :

  


  VIDSOURCE="rtsp:cameraurl"
AUDIO_OPTS="-c:a aac -b:a 160000 -ac 2"
VIDEO_OPTS="-s 854x480 -c:v libx264 -b:v 800000"
OUTPUT_HLS="-hls_time 10 -hls_list_size 10 -start_number 1 -hls_wrap 10"
ffmpeg -i "$VIDSOURCE" -y $AUDIO_OPTS $VIDEO_OPTS $OUTPUT_HLS mystream.m3u8


  


  I am wondering if I should worry about shell injection risk and if I should try another approach. I don't think there is any user input in this besides my own hard coded inputs. Therefore, I think it should be safe to use this script in a web browser... I just want to be safe and be sure. Thank you !

  


• avformat/mp3dec : Require probing data to be 50% mp3 frames for low score probing...

  12 mai 2018, par Michael Niedermayer

  avformat/mp3dec : Require probing data to be 50% mp3 frames for low score probing to succeed
  This massively reduces the detection of random data as low score mp3
  
  It may improve security by making it harder to read non multimedia data
  Signed-off-by : Michael Niedermayer <michael@niedermayer.cc>
  

  • [DH] libavformat/mp3dec.c

• Community survey revealed – Discover the profile of a Piwik user

  7 novembre 2017, par Piwik Core Team — Community

  In January 2017 we launched a Piwik community survey which gathered more than a thousand responses. It is now time for us to release the results of this study. We release today the results of this survey painting a picture of the growing Piwik Analytics community !

  What types of businesses are using Piwik ?

  Just a reminder : Piwik is currently used on over 1 million websites and mobile apps.

  

  According to the community survey, 75% of businesses using Piwik are small companies and 25% are medium to large enterprises. Out of those 25%, more than 7% are large enterprises with more than a 1,000 of employees.

  Why choosing Piwik ?

  With a large majority, Open Source came first with almost 50% of the answers, then come the data security aspect (27%) in third comes the raw data access (10,5%) and for a minor part customizability with 1,9%.

  How often is Piwik used ?

  92% of respondents said that they are using Piwik regularly (at least once per month) :

  • on a daily basis 28%
  • on a weekly basis 41%
  • on a monthly basis 23%

  Is Piwik mostly installed on Intranet or External websites ?

  

  Piwik is mainly installed on external websites, 80% of the cases. However, 12% of respondents answer that they are using it on intranet too. The remaining 8% have chosen not to answer.

  Which CRM for Piwik users ?

  As CRM is a high valuable asset within the company, we wanted to check if there were any needs for Piwik to develop something specifically for CRM.
  The answers showed us that in almost 60% of the cases no CRM was used at all, for the rest there is no clear leading CRM which is used more than others.

  Do Piwik users wish more integrations to third party applications such as CRM, support systems ?

  60% of responders said no, which can clearly be understood from previous question. But the 40% remaining are clearly showing that they wish more integrations. We heard you, we are constantly updating our integration page. If there are any integrations you wish to have, do not hesitate to contact the solution provider and suggest them to integrate their product with Piwik.

  How do Piwik users get notified when a KPI reach a specific value ?

  Great question, great answers. Almost 50% of responders are not notified when something happens in Piwik and prefer to have a look at the UI instead. 15% did not know that it was possible using Custom Alerts but may have a look it. Some of you are also designing their own system. It made us realize here that we need to change our UI and integrate custom alerts to the main UI directly. Custom alerts is a great feature that you can access within the administration panel to get notified when something happened in your Piwik data.

  

  Which improvements could be made to Piwik ?

  Only 20% of you answered to this question, which is a good thing for us