Comments on: Patch it or Scratch it: RealPlayer

By: RealPlayer: Rip and Replace | Complete Source

RealPlayer: Rip and Replace | Complete Source — Mon, 25 Jan 2010 23:55:17 +0000

[...] Krebs declared: Patch it or Scratch it … Securing your computer isn’t just about making sure the doors and [...]

Like or Dislike: 0 0

By: KFritz

KFritz — Sun, 24 Jan 2010 07:18:27 +0000

Oops. Missed comment #1.

Like or Dislike: 1 0

By: KFritz

KFritz — Sun, 24 Jan 2010 06:40:57 +0000

How about Real Alternative?

http://www.free-codecs.com/download/real_Alternative.htm

It takes up less room that its namesake. I only used Real for music streams that, for whatever reason, use the Real format. RealAlt performs the function with none of the baggage.

Like or Dislike: 0 0

By: Minot Isok

Minot Isok — Fri, 22 Jan 2010 19:22:25 +0000

The NASA website still uses RealPlayer for streaming. The website says that streaming is provided by Yahoo and that you need to use RealPlayer or Windows Media Player.

WMP for Windows users and RealPlayer for Macs. I use Windows XP and have never been able to view NASA streams with WMP, I always have to use RealPlayer.

Like or Dislike: 0 0

By: Plaats hier software gerelateerd nieuws! - Page 17

Plaats hier software gerelateerd nieuws! - Page 17 — Fri, 22 Jan 2010 17:58:48 +0000

[...] beloningsprogramma en RealNetworks zelf. In plaats van updaten krijgen internetgebruikers ook het advies om de mediaspeler te verwijderen. Steeds minder online filmpjes werken alleen met RealPlayer, [...]

Like or Dislike: 0 0

By: John

John — Fri, 22 Jan 2010 16:58:13 +0000

While I agree that VLC Player kicks butt, and has been on my machine for several years, I have to ask myself….

1. How often do they do security updates?
2. What makes VLC more secure than, say, RealPlayer? 3. Does VideoLAN commit any resources to keeping its player safe?

I am more than happy to remove RealPlayer from my system to patch up any forgotten or unused holes, but am not sure that VLC doesn’t have its own list of potential weaknesses.

Like or Dislike: 0 2

By: Paul

Paul — Fri, 22 Jan 2010 11:47:08 +0000

Your update link at the bottom of the page (http://service.real.com/realplayer/security/01192010_player/en/) is the advisory page rather than an update page. I’m sure your readers are intelligent enough to scroll down to the “Instructions” section to find the update link to their OS. The users I’m responsible for would just be confounded if they saw that page, so I’m telling them to update thus (copied from the bottom of this page http://real.custhelp.com/app/answers/detail/a_id/3208):
1. Open RealPlayer and click the Tools menu, then Preferences.
2. In the Category pane on the left side, click AutoUpdate.
3. Click the Check for Update now button.

Like or Dislike: 2 0

By: Conrad Longmore

Conrad Longmore — Fri, 22 Jan 2010 10:24:56 +0000

If you’re a home user, then Secunia PSI – http://secunia.com/vulnerability_scanning/personal/ – is an excellent tool for tracking the patch levels of installed applications and helping you to keep them up-to-date. There’s also an online scanner at http://secunia.com/vulnerability_scanning/online/ if you don’t want to install anything.

Like or Dislike: 3 0

By: BrianKrebs

BrianKrebs — Fri, 22 Jan 2010 04:22:31 +0000

Josef — I don’t know the answer to your question, but it’s a good one and I’ll be happy to put it to someone at Sun.

Like or Dislike: 1 0

By: josef

josef — Fri, 22 Jan 2010 02:38:49 +0000

Brian,

You mentioned Java as an optional program above. I noticed that after installing their recent version 6 update 18 that I have several Java console Add-ins for Firefox installed now, which correspond to older versions (Java Console 6.0.16, Java Console 6.0.17, Java Console 6.0.18).

Do you know if these older consoles pose security risks (i.e. that programs can indicate which version of Java to use)? I thought Java was removing older versions on the update process.

Thanks!

Like or Dislike: 2 0