SyScan Information Security Conference (CFP Beijing, China)
September 12, 2017 - September 13, 2017
What if I told you, that when you’re watching a movie on your PC or streamer – someone might also be watching you? And he might be doing so – using subtitles.
Yes, subtitles, those innocent looking text lines at the bottom of your screen.
Millions of people use them without a second thought – never wondering where they come from, where they’re parsed or how they are rendered.
You might be surprised to find that there are actually more than 25 subtitle formats out there, most of which support exotic features such as HTML tags, raw images or even freeform binary (What?). Moreover, there is usually no standard library designed to parse subtitles, which leaves this task to be independently implemented by the various media players.