chromecast

VLC prepares to add AirPlay support as it crosses 3 billion downloads

Posted by | Android, apple tv, Apps, CES 2019, chromecast, internet television, Nintendo, roku, Software, venturebeat, VLC, webcams | No Comments

VLC, the hugely popular media playing service, is filling one of its gaps with the addition of AirPlay support as it has just crossed an incredible three billion users.

The new feature was revealed by Jean-Baptiste Kempf, one of the service’s lead developers, in an interview with Variety at CES and it will give users a chance to beam content from their Android or iOS device to an Apple TV. The addition, which is due in the upcoming version 4 of VLC, is the biggest new feature since the service added Chromecast support last summer.

But that’s not all that the dozen or so people on the VLC development team are working on.

In addition, Variety reports that VLC is preparing to enable native support for VR content. Instead of SDKs, the team has reversed engineered popular hardware to offer features that will include the option to watch 2D content in a cinema-style environment. There also are plans to bring the service to more platforms, with VentureBeat reporting that the VLC team is eyeing PlayStation 4, Nintendo Switch and Roku devices.

VLC, which is managed by nonprofit parent VideonLAN, racked up its three billionth download at CES, where it celebrated with the live ticker pictured above. The service reached one billion downloads back in May 2012, which represents incredible growth for a venture that began life as a project from École Centrale Paris students in 1996.

VLC. The hero of our time. https://t.co/B4Qqq4DvLa

— Zack Whittaker (@zackwhittaker) January 11, 2019

CES 2019 coverage - TechCrunch

Powered by WPeMatico

Hackers hijack thousands of Chromecasts to warn of latest security bug

Posted by | Amazon, chromecast, computing, echo, Gadgets, Google, Hack, hardware, iPad, media streamer, Security, smart devices, smart home devices, spokesperson, technology, wi-fi | No Comments

Hackers have hijacked thousands of exposed Chromecast streaming devices to warn users of the latest security flaw to affect the device. But other security researchers say that the bug — if left unfixed — could be used for more disruptive attacks.

The culprits, known as Hacker Giraffe and J3ws3r, have become the latest person to figure out how to trick Google’s media streamer into playing any YouTube video they want — including videos that are custom-made. This time around, the hackers hijacked forced the affected Chromecasts to display a pop-up notice that’s viewable on the connected TV, warning the user that their misconfigured router is exposing their Chromecast and smart TV to hackers like themselves.

Not one to waste an opportunity, the hackers also asks that you subscribe to PewDiePie, an awful internet person with a popular YouTube following. (He’s the same hacker who tricked thousands of exposed printers into printing support for PewDiePie.)

The bug, dubbed CastHack, exploits a weakness in both Chromecast and the router it connects to. Some home routers have enabled Universal Plug and Play (UPnP), a networking standard that can be exploited in many ways. UPnP forwards ports from the internal network to the internet, making Chromecasts and other devices viewable and accessible from anywhere on the internet.

As the two say, disabling UPnP should fix the problem.

“We have received reports from users who have had an unauthorized video played on their TVs via a Chromecast device,” a Google spokesperson told TechCrunch. “This is not an issue with Chromecast specifically, but is rather the result of router settings that make smart devices, including Chromecast, publicly reachable,” the spokesperson said.

That’s true on one hand, but it doesn’t address the underlying issue — that the Chromecast can be tricked into allowing an unauthenticated attacker the ability to hijack a media stream and display whatever they want.

Hacker Giraffe sent this YouTube video to thousands of exposed Chromecast devices, warning that their streams could be easily hijacked. (Screenshot: TechCrunch)

Bishop Fox, a security consultancy firm, first found a hijack bug in 2014, not long after the Chromecast debuted. The researchers found that they could conduct a “deauth” attack that disconnects the Chromecast from the Wi-Fi network it was connected to, causing it to revert back to its out-of-the-box state, waiting for a device to tell it where to connect and what to stream. That’s when it can be hijacked and forced to stream whatever the hijacker wants. All of this can be done in an instant — as they did — with a touch of a button on a custom-built handheld remote.

Two years later, U.K. cybersecurity firm Pen Test Partners discovered that the Chromecast was still vulnerable to “deauth” attacks, making it easy to play content on a neighbor’s Chromecasts in just a few minutes.

Ken Munro, who founded Pen Test Partners, says there’s “no surprise that somebody else stumbled on to it,” given both Bishop Fix found it in 2014 and his company tested it in 2016.

“In fairness, we never thought that the service would be exposed on the public internet, so that is a very valid finding of his, full credit to him for that,” Munro told TechCrunch. (Google said in a follow-up email that it’s working to fix the deauth bug.)

He said the way the attack is conducted is different, but the method of exploitation is the same. CastHack can be exploited over the internet, while Bishop Fox and his “deauth” attacks can be carried out within range of the Wi-Fi network — yet, both attacks let the hacker control what’s displayed on the TV from the Chromecast, he said.

Munro said Google should have fixed its bug in 2014 when it first had the chance.

“Allowing control over a local network without authentication is a really silly idea on [Google’s] part,” he said. “Because users do silly things, like expose their TVs on the internet, and hackers find bugs in services that can be exploited.”

But Munro said that these kinds of attacks — although obnoxious and intrusive on the face of it — could be exploited to have far more malicious consequences.

In a blog post Wednesday, Munro said it was easy to exploit other smart home devices — like an Amazon Echo — by hijacking a Chromecast and forcing it to play commands that are loud enough to be picked up by its microphone. That’s happened before, when smart assistants get confused when they overhear words on the television or radio, and suddenly and without warning purchase items from Amazon. (You can and should turn on a PIN for ordering through Amazon.)

To name a few, Munro said it’s possible to force a Chromecast into loading a YouTube video created by an attacker to trick an Echo to: “Alexa, order an iPad,” or, “Alexa, turn off the house alarm,” or, “Alexa, set an alarm every day at 3am.”

Amazon Echos and other smart devices are widely considered to be secure, even if they’re prone to overhearing things they shouldn’t. Often, the weakest link are humans. Second to that, it’s the other devices around smart home assistants that pose the biggest risk, said Munro in his blog post. That was demonstrated recently when Canadian security researcher Render Man showed how using a sound transducer against a window can trick a nearby Amazon Echo into unlocking a network-connected smart lock on the front door of a house.

“Google needs to properly fix the Chromecast deauth bug that allows casting of YouTube traffic,” said Munro.

Updated at 9pm ET: with a new, clearer headline to better reflect the flaws over the years, and added additional comment from Google.

Powered by WPeMatico

Best Buy stocked an unannounced Chromecast ahead of Google’s hardware event

Posted by | Android, Best-Buy, chromecast, Google, hardware, PIXEL, Reddit | No Comments

Google’s big hardware event, scheduled for October 9, is expected to feature the new Pixel 3 and Pixel 3 XL phones. But now we know that Google will probably reveal a third-generation model of Chromecast, thanks to one recent Best Buy customer who discovered the device on store shelves.

Whoops.

“GroveStreetHomie” detailed his experience on a Reddit post entitled “I think I bought the 3rd gen Chromecast too early.”

According to the Reddit post, the customer went to Best Buy earlier to pick up a Chromecast for a new TV. That’s when “GroveStreetHomie” noticed the packaging and design was different from an earlier version.

The cashier wasn’t able to scan the item because it wasn’t in the system yet. The release date was labeled October 9 — the same day as the 2018 Google hardware event.

“But since I already had it in my hand and was the same price as the 2nd generation Chromecast, they let me have it under the old SKU,” the post read.

This new unannounced Chromecast is apparently thicker than the second-generation model. The Chrome logo has been replaced with Google one. The new device still has a micro-USB. The HDMI connector on the tip and base has been removed, according to the user.

Powered by WPeMatico

JBL’s $250 Google Assistant smart display is now available for pre-order

Posted by | Android, artificial intelligence, chromecast, computing, Gadgets, Google, Google Assistant, hardware, JBL, lenovo, LG, TC | No Comments

It’s been a week since Lenovo’s Google Assistant-powered smart display went on sale. Slowly but surely, its competitors are launching their versions, too. Today, JBL announced that its $249.95 JBL Link View is now available for pre-order, with an expected ship date of September 3, 2018.

JBL went for a slightly different design than Lenovo (and the upcoming LG WK9), but in terms of functionality, these devices are pretty much the same. The Link View features an 8-inch HD screen; unlike Lenovo’s Smart Display, JBL is not making a larger 10-inch version. It’s got two 10W speakers and the usual support for Bluetooth, as well as Google’s Chromecast protocol.

JBL says the unit is splash proof (IPX4), so you can safely use it to watch YouTube recipe videos in your kitchen. It also offers a 5MP front-facing camera for your video chats and a privacy switch that lets you shut off the camera and microphone.

JBL, Lenovo and LG all announced their Google Assistant smart displays at CES earlier this. Lenovo was the first to actually ship a product, and both the hardware as well as Google’s software received a positive reception. There’s no word on when LG’s WK9 will hit the market.

Powered by WPeMatico

Anker Mars II projector promises solid summer fun

Posted by | Amazon, Android, AV, Bluetooth, bluetooth speaker, chromecast, computing, DLP, Gadgets, HDMI, Netflix, smartphones, TC, wi-fi | No Comments

Anker, a popular if battery and cable company, recently announced the Mars II projector under its Nebula brand. The company, which primarily sells via Amazon, is expanding out of batteries and cables and is now creating audio and other portable AV gear. This compact, battery-powered DLP projector is their latest creation and it has found a place of honor at our family barbecues.

The projector is actually an Android 7.1 device stuffed into a case about as big as a Bluetooth speaker. A physical lens cap slides down and turns on the system and you control everything from he included remote or the buttons on the top of the device. You can also download an app that mimics a mouse and keyboard for choosing videos and information entry. It projects at a maximum of 300 lumens and projects at 720p. You can also connect an HDMI device like a game console or stick in a USB drive full of videos to view on the fly.

Again, the real benefit here is the ability to stream from various apps. I have YouTube, Netflix, Plex, and other apps installed and you can install almost any other Android app you can imagine. It has speakers built in and you can cast to it via Miracast but you cannot insert a Chromecast.

If all you want to do is throw up a little Santa Clarita Diet or Ice Age on a sheet in the back yard, this thing is perfect. Because the brightness is fairly low you need solid twilight or a partially dark room to get a good picture. However, the picture is good enough and it would also make a great presentation device for a closed, dark conference room. Because of its small size and battery life – four hours on a charge – it makes for a great alternative to a full-sized projector or even a standard TV.

At $539 the Mars II is priced on par with other 720p projectors. The primary use case – connecting a computer or console via HDMI – works quite well but streaming user experience is a bit of a mixed bag. Because Anker didn’t modify the Android installation much further than adding a few default apps, some apps require a mouse to use and others can be controlled via the arrow keys on the remote or body of the device. This means that some apps – like Plex, for example – let you pick a video via the arrow keys but require you to press the “mouse” button to begin simulating a mouse cursor on the screen. It’s a bit frustrating, especially in poor lighting conditions.

One of the interesting features is the automatic focus system. Instead of fiddling with a knob or slider, you simply point this at a surface and the system projects a bullseye focus ring until the picture is in focus. The focus changes any time you move the device and sometimes it gets caught up if the screen or projector are moving. However in most cases it works perfectly fine.

Like most portable projectors you aren’t buying the Mars II to watch 4K video in 5.1 surround sound. You buy it to offer an alternative to sitting on the couch and watching a movie. That means this is great for on-the-road business presentations, campouts, outdoor movie viewing, and sleepovers. It is cheap and portable enough to be almost disposable and it’s not as heavy and hot as other, larger devices. In short, it can go anywhere, show anything, and works really well. Anker also makes the Mars, a more expensive 1080p device, but this one works just fine for about $400 less – a big drop in just about a year of brisk sales. It’s nice to see a good, low-cost manufacturer dabble in the world of complex consumer electronics and come up with a product that is truly useful and fun.

Powered by WPeMatico

Brookstone’s all-weather Big Blue Party Wi-Fi Speaker sounds great and has Chromecast

Posted by | brookstone, chromecast, Gadgets, hardware, Reviews, TC, wireless speakers | No Comments

 In case a certain recent product unveiling got you hankering for a connected speaker with impressive, room-filling audio performance, you’re in luck: The Brookstone Big Blue Party Indoor-Outdoor Wireless Wi-Fi Speaker is exactly that, and you can buy one right now. Plus, it’s available for less than the price of that other speaker — even when it does eventually go on sale. Read More

Powered by WPeMatico

Google is fixing up Chromecast’s ‘Cast a tab’ feature and you can try the new version now

Posted by | Chrome, chromecast, Gadgets, Google, TC | No Comments

 I’ve been saying it for a few years now, but I really, really like the Chromecast — Google’s simple little dongle for streaming Netflix/Hulu/YouTube etc. from your devices to your TV with just a tap or two. It does what it’s supposed to do, does it well and doesn’t try to do anything more than that. Well… that’s not entirely true. Read More

Powered by WPeMatico

Everything you need to know from Google’s Pixel event

Posted by | artificial intelligence, chromecast, daydream view, Entertainment, Gadgets, Google, Google Assistant, Google Daydream, google home, Google WiFi, googlepixel, hardware, Mobile, pixel phone, TC, virtual assistant, Virtual reality, Wearables | No Comments

MOUNTAIN VIEW, CA - MAY 18: Google CEO Sundar Pichai speaks during Google I/O 2016 at Shoreline Amphitheatre on May 19, 2016 in Mountain View, California. The annual Google I/O conference is runs through May 20. (Photo by Justin Sullivan/Getty Images) Google unveiled a gaggle of new products and services today at its event in San Francisco. The company was all about making things easy and seamless, so we thought we’d do the same. Here’s all the stuff you need to know, in one place. Read More

Powered by WPeMatico

Google rebrands its Chromecast app to Google Cast to reflect expansion to more devices, including speakers

Posted by | chromecast, Gadgets, Google, Google Cast, TC | No Comments

google-cast Google announced this morning that it’s renaming its Chromecast application to “Google Cast,” in an effort to better reflect how the technology works across an array of devices, including not only the Chromecast dongles, but also TVs, displays and speakers. The company says the updated app, available for both iOS and Android, will roll out this week for all users. Chromecast,… Read More

Powered by WPeMatico