Hi
user
Admin Login:
Username:
Password:
Name:
The dangerous, exquisite art of safely handing user-uploaded files
--client
lca
--show
lca2017
--room wellington_1 12162 --force
Next: 12 The Vulkan Graphics API - what it means for Linux
show more...
Marks
Author(s):
Tom Eastman
Location
Wellington Room 1
Date
jan Tue 17
Days Raw Files
Start
22:40
First Raw Start
22:16
Duration
0:45:0
Offset
0:23:33
End
23:25
Last Raw End
23:21
Chapters
00:00
0:05:59
0:35:59
Total cuts_time
38 min.
http://linux.conf.au/schedule/presentation/169/
raw-playlist
raw-mp4-playlist
encoded-files-playlist
host
archive
tweet
mp4
svg
png
assets
release.pdf
The_dangerous_exquisite_art_of_safely_handing_useruploaded_files_2.json
logs
Admin:
episode
episode list
cut list
raw files day
marks day
marks day
image_files
State:
---------
borked
edit
encode
push to queue
post
richard
review 1
email
review 2
make public
tweet
to-miror
conf
done
Locked:
clear this to unlock
Locked by:
user/process that locked.
Start:
initially scheduled time from master, adjusted to match reality
Duration:
length in hh:mm:ss
Name:
Video Title (shows in video search results)
Emails:
email(s) of the presenter(s)
Released:
has someone authorised pubication
Unknown
Yes
No
Normalise:
Channelcopy:
m=mono, 01=copy left to right, 10=right to left, 00=ignore.
Thumbnail:
filename.png
Description:
markdown
Every web application has an attack surface -- the exposed points of interaction where a malicious or mischievous user can commit malice, or mischief (respectively). Possibly nowhere, however, is more vulnerable than places a user is allowed to upload arbitrary files. The scope for abuse is eye-widening: The contents of the file, the type of the file, the size and encoding of the file, even the *name* of the file can be a potent vector for attacking your system. The scariest part? Even the best and most secure web-frameworks can't protect you from all of it. In this talk, I'll show you every scary thing I know about that can be done with a file upload, and how to protect yourself from -- hopefully -- most of them.
Comment:
production notes
2017-01-18/15_16_27.ts
Apply:
22:16:27 - 22:40:27 ( 00:24:00 )
S:
22:16:27 -
E:
22:46:26
D:
00:29:59
(
End:
1440.0)
show more...
vlc ~/Videos/veyepar/lca/lca2017/dv/wellington_1/2017-01-18/15_16_27.ts :start-time=00.0 --audio-desync=0
Raw File
Cut List
22:16:27
seconds: 0.0
Wall: 22:16:27
Duration
00:29:59
22:46:26
seconds: 1440.0
Wall: 22:40:27
Comments:
mp4
mp4.m3u
dv.m3u
Split:
Sequence:
:
delete
2017-01-18/15_16_27.ts
Apply:
22:40:27 - 22:46:26 ( 00:05:59 )
S:
22:16:27 -
E:
22:46:26
D:
00:29:59
(
Start:
1440.0)
show more...
vlc ~/Videos/veyepar/lca/lca2017/dv/wellington_1/2017-01-18/15_16_27.ts :start-time=01440.0 --audio-desync=0
Raw File
Cut List
22:16:27
seconds: 1440.0
Wall: 22:40:27
Duration
00:29:59
22:46:26
seconds: 0.0
Wall: 22:16:27
Comments:
mp4
mp4.m3u
dv.m3u
Split:
Sequence:
:
delete
2017-01-18/15_46_27.ts
Apply:
22:46:27 - 23:16:27 ( 00:30:00 )
S:
22:46:27 -
E:
23:16:27
D:
00:30:00
show more...
vlc ~/Videos/veyepar/lca/lca2017/dv/wellington_1/2017-01-18/15_46_27.ts :start-time=00.0 --audio-desync=0
Raw File
Cut List
22:46:27
seconds: 0.0
Wall: 22:46:27
Duration
00:30:00
23:16:27
seconds: 0.0
Wall: 22:46:27
Comments:
mp4
mp4.m3u
dv.m3u
Split:
Sequence:
:
delete
2017-01-18/16_16_27.ts
Apply:
23:16:27 - 23:18:53 ( 00:02:26 )
S:
23:16:27 -
E:
23:21:42
D:
00:05:15
(
End:
146.0)
show more...
vlc ~/Videos/veyepar/lca/lca2017/dv/wellington_1/2017-01-18/16_16_27.ts :start-time=00.0 --audio-desync=0
Raw File
Cut List
23:16:27
seconds: 0.0
Wall: 23:16:27
Duration
00:05:15
23:21:42
seconds: 146.0
Wall: 23:18:53
Comments:
mp4
mp4.m3u
dv.m3u
Split:
Sequence:
:
delete
2017-01-18/16_16_27.ts
Apply:
23:18:53 - 23:21:42 ( 00:02:49 )
S:
23:16:27 -
E:
23:21:42
D:
00:05:15
(
Start:
146.0)
show more...
vlc ~/Videos/veyepar/lca/lca2017/dv/wellington_1/2017-01-18/16_16_27.ts :start-time=0146.0 --audio-desync=0
Raw File
Cut List
23:16:27
seconds: 146.0
Wall: 23:18:53
Duration
00:05:15
23:21:42
seconds: 0.0
Wall: 23:16:27
Comments:
mp4
mp4.m3u
dv.m3u
Split:
Sequence:
:
delete
Rf filename:
root is .../show/dv/location/, example: 2013-03-13/13:13:30.dv
Sequence:
get this:
check and save to add this
2017-01-18/15_16_27.ts
2017-01-18/15_46_27.ts
2017-01-18/16_16_27.ts
Veyepar
Video Eyeball Processor and Review