Elmedia Player is a competitive VLC alternative for Mac with the ability to stream video and music from AirPlay devices and to download online media from popular hosting websites. Of course you get to really understand things through comparison, and that's why we ran a comparison test on two most powerful media players - VLC and Elmedia Player. VLC Media Player for Mac is a powerful and efficient app for playing all kinds of media in multiple formats right on your Mac. With this app in place, you can just download and watch what you want. As an all-inclusive video player application, VLC Player has the HEVC support built-in for both the Windows version and the Mac version. So theoretically, VLC should have no problem handling HEVC or H.265 video materials. However, having the HEVC support is.
Just weeks after the first release candidate, the VideoLAN developers have officially released version 2.0 of the VLC media player for Windows, Mac OS X and Linux. VLC media player 2.0, code-named 'Twoflower', is a major reworking of the VLC application, bringing playback improvements and experimental support for playing Blu-ray discs, albeit without menus.
Internally, VLC 2.0 contains numerous enhancements, including a complete rewrite of the video core, reworked output functions to allow for blending with the GPU, and a new rendering pipeline for higher quality subtitles. These improvements should also give faster decoding on multi-core, GPU-supported or mobile hardware. The changes should also improve MKV file playback and H.264 decoding.
Among the more user-visible changes in VLC 2.0 is the ability to display subtitles anywhere on the screen and resize them, the addition of new filters for removing banding, grain, noise and flicker, and a new deinterlacing filter. Support for professional users has been improved with video in ProRes 422, ProRes 4444 and AVC/Intra file formats added, SDI and HD-SDI cards supported under Linux, and a new, faster, Dirac/VC-2 encoder. Audio has also been improved with new audio resamplers, dynamic range compressors and karaoke filters, and a simplified audio core for faster processing.
The Mac OS X version has a completely new UI which also supports Lion's full screen mode and can, if required, open up in its own full screen space. Under Windows and Linux, by contrast, the look is largely unchanged.
VLC 2.0 brings a new UI to Mac OS X
The underlying libraries, libVLC and libVLCcore, have also been updated to run on Android and iOS systems. The licence for the libraries has also been changed from the GPL (General Public License) to the LGPL (Lesser General Public License) which will allow developers to make use of the libraries in non-GPL open source and proprietary software.
The WIndows version of VLC is available to download and requires Windows XP (SP2) or later. VLC for Mac OS X can be also be downloaded with versions for Mac OS X 10.6 and later on Intel, and 10.5 on Intel and PowerPC. The developers refer Linux users to their distribution packager to get the application updated and included. Source code for VLC 2.0.0 is also available to download.
(djwm)
Also on The H:
Severity
According to our scale, we have had 33 valid security issues fixed thanks to this program:
- 2 high security issues, (only one was present in 3.0.x),
- 21 medium security issues,
- 10 low security issues.
The 2 more important issues are an Out-of-Bound Write and a Stack Buffer Overflow.
the is not in the VLC codebase, but in a dependency of VLC, the faad2 library, unmaintained, unfortunately.
the is a VLC 4.0-only issue in the new RIST module, and is therefore not impacting actual release of VLC.
The medium security issues are mostly out-of-band reads, heap overflows, NULL-dereference and use-after-free security issues. Those issues should not be exploitable with ASLR, but are important anyway, because they can crash VLC.
The low security issues are mostly integer overflow, division by zero, and other out-of-band reads with no actual impact. Those issues are not exploitable.
The best hacker on the program was https://hackerone.com/ele7enxxh.
Opinion about bug bounties
What follows is my personal opinion about those bug bounties programs, and is not VideoLAN's point-of-view.
Usefulness
If you've listened to some of my talks or spoke to me (I'm sorry for you), you know I'm a bit critic of those programs, because they give money to find the issues, not to fix them.
What about you give money to VLC instead of random hackers?
Well, security is important, so this is cool for our users, but still this is a mixed bag, for me.
So, in order to mitigate that, we gave large extra-bonuses for fixes provided at the same time as issues were found, to improve this problem.
Hackers
Vlc Player Mac Download Heise
During this program, we've had a lot of different hackers, from the best to the worst technically: so many script-kiddies, and people telling us that the VLC source code was visible... but also people who had deep understanding of C, of the stack and of memory issues.
Vlc Player Mac Heiser
But I would like to focus a bit more on the type of reporter we've seen.
We've had people ranging from the usual security-asshole to some of the nicest guys ever, who cared deeply to help us. And when working with the nicest people, they often send patches to fix too.
At the opposite, some reporters were more than distasteful, insulting, impatient, trying to get 2 times the bounty for the same bug, or even reporting the issues to other programs (Android one) to get more money.
The result of that, is that when you don't know how much to award for a security issue (is it medium or low?), you decide on the niceness of the reporter
Download Vlc Media Player For Mac
Thanks
Vlc Video Mac
In the end, I'd like to thank the European Commission, Julia Reda, the nice hackers and the people from the team who fixed all those bugs!