Open source VideoLAN media player asks why it's blocked in India
(2022/08/17)
- Reference: 1660705265
- News link: https://www.theregister.co.uk/2022/08/17/videolan_contests_india_ban/
- Source link:
Developers of the open source VideoLAN media player have started sniping at India's government over an apparent block on the project's website.
VideoLAN, aka VLC, develops a media player and transcriber famed for playing and transcoding almost any media format, and doing so quickly through a pleasant interface. The project [1]claims its wares have been downloaded over four billion times.
But for the last few months, would-be users located in India have not been able to download from [2]videolan.org , which has been inaccessible for users of some ISPs and in some states.
[3]
Governments and ISPs have offered no explanation for the site's inaccessibility.
[4]
[5]
One theory relates to the fact that, in April 2022, Symantec [6]suggested a China-linked crime gang named Cicada was conducting a global espionage campaign using tools including attacks on VideoLAN.
India has [7]banned hundreds of Chinese apps , so blocking videloan.org makes some sense in that context.
[8]
As VideoLAN is open source, it's also possible to create fake versions of the software and embed malware. The project has also had [9]security issues involving opening poisoned media files – but largely blamed them on a dependency rather than its own efforts.
Indian blocks of VideoLAN went largely unnoticed for weeks, until last weekend when Indian media reported on the matter. VideoLAN sprang into action on Twitter.
If you are in India, please help us. [10]https://t.co/rOpIjlx0q9 — VideoLAN (@videolan) [11]August 12, 2022
India's Internet Freedom Foundation then revealed it had been asking questions about the ban, to no avail.
On June 07, 2022, we filed a Right to Information application with [12]@DoT_India seeking information on the blocking of the website of VideoLAN[dot]org in India. DoT transferred it to [13]@GoI_MeitY , which then responded on July 14 that “No information is available [with MeitY]” (1/4) [14]https://t.co/usQHOmaJdW — Internet Freedom Foundation (IFF) (@internetfreedom) [15]August 14, 2022
One theory that emerged during recent days was that India is worried about downloads of compromised versions of VideoLAN, so blocked its website to prevent further downloads
The project today [16]rebutted that argument by stating "Blocking the main website will just push users to weirder websites, and therefore towards shady versions of VLC."
[17]India proposes increased power to vet tech mergers
[18]Honor moving team out of India for 'obvious reasons,' says CEO
[19]India binned made-in-Singapore app in latest round of China bans
The project also shared the following thread penned by ethical hacker Sunny Nehra.
1/ No idea why VLC is banned.
-> VLC is French project not Chinese.
-> For those taking about Cicada malware campaign, plz understand that a very outdated is vulnerable to DLL Hijacking (patched in 2010) and the threat actor need to install outdated VLC version for that attack. — Sunny Nehra (@sunnynehrabro) [20]August 13, 2022
The Register has contacted India's Department of Telecommunications seeking information on the ban and will update this story if we receive a substantive response. ®
Get our [21]Tech Resources
[1] https://www.videolan.org/vlc/stats/downloads.html
[2] https://www.videolan.org
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Yvxn5We5kEkuz8Hsq1@9ugAAABU&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Yvxn5We5kEkuz8Hsq1@9ugAAABU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Yvxn5We5kEkuz8Hsq1@9ugAAABU&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://www.theregister.com/2022/04/07/china-espionage-campaign/
[7] https://www.theregister.com/2020/09/03/india_bans_chinese_apps/
[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Yvxn5We5kEkuz8Hsq1@9ugAAABU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[9] https://www.theregister.com/2019/08/21/vlc_security_patch/
[10] https://t.co/rOpIjlx0q9
[11] https://twitter.com/videolan/status/1558191323034914819?ref_src=twsrc%5Etfw
[12] https://twitter.com/DoT_India?ref_src=twsrc%5Etfw
[13] https://twitter.com/GoI_MeitY?ref_src=twsrc%5Etfw
[14] https://t.co/usQHOmaJdW
[15] https://twitter.com/internetfreedom/status/1558673741474779136?ref_src=twsrc%5Etfw
[16] https://twitter.com/videolan/status/1559588495991214084
[17] https://www.theregister.com/2022/08/08/asia_tech_news_roundup/
[18] https://www.theregister.com/2022/07/25/honor_moving_out_of_india/
[19] https://www.theregister.com/2022/02/28/sea_singapore_app_ban/
[20] https://twitter.com/sunnynehrabro/status/1558322179007078401?ref_src=twsrc%5Etfw
[21] https://whitepapers.theregister.com/
VideoLAN, aka VLC, develops a media player and transcriber famed for playing and transcoding almost any media format, and doing so quickly through a pleasant interface. The project [1]claims its wares have been downloaded over four billion times.
But for the last few months, would-be users located in India have not been able to download from [2]videolan.org , which has been inaccessible for users of some ISPs and in some states.
[3]
Governments and ISPs have offered no explanation for the site's inaccessibility.
[4]
[5]
One theory relates to the fact that, in April 2022, Symantec [6]suggested a China-linked crime gang named Cicada was conducting a global espionage campaign using tools including attacks on VideoLAN.
India has [7]banned hundreds of Chinese apps , so blocking videloan.org makes some sense in that context.
[8]
As VideoLAN is open source, it's also possible to create fake versions of the software and embed malware. The project has also had [9]security issues involving opening poisoned media files – but largely blamed them on a dependency rather than its own efforts.
Indian blocks of VideoLAN went largely unnoticed for weeks, until last weekend when Indian media reported on the matter. VideoLAN sprang into action on Twitter.
If you are in India, please help us. [10]https://t.co/rOpIjlx0q9 — VideoLAN (@videolan) [11]August 12, 2022
India's Internet Freedom Foundation then revealed it had been asking questions about the ban, to no avail.
On June 07, 2022, we filed a Right to Information application with [12]@DoT_India seeking information on the blocking of the website of VideoLAN[dot]org in India. DoT transferred it to [13]@GoI_MeitY , which then responded on July 14 that “No information is available [with MeitY]” (1/4) [14]https://t.co/usQHOmaJdW — Internet Freedom Foundation (IFF) (@internetfreedom) [15]August 14, 2022
One theory that emerged during recent days was that India is worried about downloads of compromised versions of VideoLAN, so blocked its website to prevent further downloads
The project today [16]rebutted that argument by stating "Blocking the main website will just push users to weirder websites, and therefore towards shady versions of VLC."
[17]India proposes increased power to vet tech mergers
[18]Honor moving team out of India for 'obvious reasons,' says CEO
[19]India binned made-in-Singapore app in latest round of China bans
The project also shared the following thread penned by ethical hacker Sunny Nehra.
1/ No idea why VLC is banned.
-> VLC is French project not Chinese.
-> For those taking about Cicada malware campaign, plz understand that a very outdated is vulnerable to DLL Hijacking (patched in 2010) and the threat actor need to install outdated VLC version for that attack. — Sunny Nehra (@sunnynehrabro) [20]August 13, 2022
The Register has contacted India's Department of Telecommunications seeking information on the ban and will update this story if we receive a substantive response. ®
Get our [21]Tech Resources
[1] https://www.videolan.org/vlc/stats/downloads.html
[2] https://www.videolan.org
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Yvxn5We5kEkuz8Hsq1@9ugAAABU&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Yvxn5We5kEkuz8Hsq1@9ugAAABU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Yvxn5We5kEkuz8Hsq1@9ugAAABU&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://www.theregister.com/2022/04/07/china-espionage-campaign/
[7] https://www.theregister.com/2020/09/03/india_bans_chinese_apps/
[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Yvxn5We5kEkuz8Hsq1@9ugAAABU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[9] https://www.theregister.com/2019/08/21/vlc_security_patch/
[10] https://t.co/rOpIjlx0q9
[11] https://twitter.com/videolan/status/1558191323034914819?ref_src=twsrc%5Etfw
[12] https://twitter.com/DoT_India?ref_src=twsrc%5Etfw
[13] https://twitter.com/GoI_MeitY?ref_src=twsrc%5Etfw
[14] https://t.co/usQHOmaJdW
[15] https://twitter.com/internetfreedom/status/1558673741474779136?ref_src=twsrc%5Etfw
[16] https://twitter.com/videolan/status/1559588495991214084
[17] https://www.theregister.com/2022/08/08/asia_tech_news_roundup/
[18] https://www.theregister.com/2022/07/25/honor_moving_out_of_india/
[19] https://www.theregister.com/2022/02/28/sea_singapore_app_ban/
[20] https://twitter.com/sunnynehrabro/status/1558322179007078401?ref_src=twsrc%5Etfw
[21] https://whitepapers.theregister.com/