
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
NOTE: In progress!! Come back later!
A relatively easy-to-use utility to set up one or more RaspberryPi's as a video player.
PiPlayer will install vlc on your Pi(s), transfer videos, and set them to play on startup.
You should have one or more Pi's on your local network. The Pi's should have:
On your computer, install PiPlayer with:
pip install piplayer
You can send one or more videos directly to individual Pi's like so:
piplayer --host HOSTNAME --video VIDEONAME.mp4
This will transfer the video file(s) to the Pi, and make them play on startup in a loop. The --video
option can take multiple video files.
For more complex scenarios, you can also create project instructions as a YAML file. Here's an example project file:
players:
- host: player1.local
videos: vid1.mp4
- host: player2.local
videos: ["vid2.mp4", "vid3.mp4"]
To use:
piplayer --project PROJECTFILE.yaml
players
is an array, containing at minimum a host
and video
entry.
host: the hostname or ip of the Pi on the local network
videos: the local path(s) to video files to be sent to the Pi
This can be a single video, an array, or a glob pattern (like myvids/*.mp4
).
The following settings are optional:
loop: should the playlist loop?
Can be true
or false
. Defaults to true
.
random: play the videos in random order
Can be true
or false
. Defaults to false
.
user: the username on the Pi
Defaults to pi
.
gap: (TODO!) time in seconds to pause between each video (shows a black screen)
Defaults to 0.0
.
start_at: (TODO!) start the playlist at a specific time.
Defaults to 0.0
.
If you want to apply the same settings to all the Pi's, add a settings
dictionary like so:
settings:
user: cooluser
random: true
gap: 2
These settings will be sent to all the Pi's listed in the players
section (but individual player settings have precedence).
FAQs
A command line interface to help set up a raspberry pi as a video player.
We found that piplayer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.