Photo: Jaap Arriens/NurPhoto via Getty Images

A glitch in software designed by Netflix in 2013, used in early versions of Google Chromecast and installed in several mid-decade televisions and other devices would allow an attacker to crash a TV, according to new research from security firm ForAllSecure.

The big picture: Netflix's DIAL software allowed people to broadcast video from a phone or computer onto their television and was an early component of Chromecast until Google moved that software in a different direction. Though the software is now obsolete, many TVs came preinstalled with DIAL.

The discovery was made by 2 interns at ForAllSecure completing an assignment to use the company's Mayhem automated security analysis software to analyze open source software.

  • The interns turned the glitches over to Netflix through a "bug bounty" program, where Netflix offers cash rewards to researchers who uncover security flaws in its products. Netflix has now patched the bug.
  • The interns will get to keep the bounty, co-founder and CEO David Brumley told Axios.
    • “You’ve got to motivate interns to stay in security somehow,” he said.

Details: The DIAL glitch comes from an error in how data is stored in computer memory in a modified version of a coding library known as Mongoose.

  • It’s not immediately clear if the glitch affects other products using Mongoose around the same time, noted Brumley.

Go deeper

Updated 18 mins ago - Politics & Policy

Coronavirus dashboard

Illustration: Sarah Grillo/Axios

  1. Global: Total confirmed cases as of 7 p.m. ET: 31,444,163 — Total deaths: 967,305— Total recoveries: 21,551,157Map.
  2. U.S.: Total confirmed cases as of 7 p.m. ET: 6,889,086 — Total deaths: 200,641 — Total recoveries: 2,615,974 — Total tests: 95,846,925Map.
  3. Health: The U.S. reaches 200,000 coronavirus deaths — The CDC's crumbling reputation — America turns against coronavirus vaccine.
  4. Politics: Elected officials are failing us on much-needed stimulus.
  5. Business: Two-thirds of business leaders think pandemic will lead to permanent changes — Fed chair warns economy will feel the weight of expired stimulus.
  6. Sports: NFL fines maskless coaches.

House Democrats, Trump administration strike deal to avert government shutdown

House Speaker Nancy Pelosi (D-Calif.). Photo: Tom Williams/CQ-Roll Call via Getty Images

House Democrats have reached a deal with the Trump administration on legislation to fund the government through Dec. 11, Speaker Nancy Pelosi (D-Calif.) announced Tuesday.

Why it matters: The deal will avert a government shutdown when funding expires in eight days. Pelosi and House Majority Leader Steny Hoyer (D-Md.) said earlier that they hoped to hold a vote on the legislation on Tuesday evening.

Updated 1 hour ago - Politics & Policy

Trump says he will announce Supreme Court pick on Saturday

Photo: Mandel Ngan/AFP via Getty Images

President Trump tweeted Tuesday that he plans to announce his Supreme Court pick on Saturday. He later told reporters that the announcement will come at 5 p.m.

Why it matters: Republicans are moving fast to replace the late Justice Ruth Bader Ginsburg, which would tilt the balance of the high court in conservatives' favor and have lasting impact on climate policy, immigration and the Affordable Care Act.

Get Axios AM in your inbox

Catch up on coronavirus stories and special reports, curated by Mike Allen everyday

Please enter a valid email.

Subscription failed
Thank you for subscribing!