[vlc-devel] [PATCH] Qt: Hack in a simple preferences option for http

Rémi Denis-Courmont remi at remlab.net
Tue Feb 7 08:14:54 CET 2012


On Mon,  6 Feb 2012 23:10:56 -0500, Edward Wang
<edward.c.wang at compdigitec.com> wrote:
> Close #5986

I object to having this in the simple preferences. This option is
extremely insecure. There are known ways to overwrite arbitrary files with
the HTTP interface...

If this option is so easy to find, users will enable it just because it
sounds cool. IMHO, this is not acceptable until the HTTP interface has
proper authentication and confidentiality out-of-the-box.

-- 
Rémi Denis-Courmont
http://www.remlab.net/



More information about the vlc-devel mailing list