oss-sec mailing list archives

Re: The Internet Bug Bounty: Data Processing (hackerone.com)


From: Reed Loden <reed () reedloden com>
Date: Mon, 02 Oct 2017 11:01:19 +0000

On Fri, Sep 29, 2017 at 6:12 AM Hanno Böck <hanno () hboeck de> wrote:

On Thu, 28 Sep 2017 23:13:22 -0700
Reed Loden <reed () reedloden com> wrote:

Separately, we're happy to announce that libav (
https://git.libav.org/?p=libav.git;a=summary) was added to the scope
earlier today.

I'm surprised by this. When I saw the ibb-data bounty I immediately
wondered whether ffmpeg should be in there.

Is there a reason libav is in and ffmpeg is not? Were there concerns by
the ffmpeg devs? (I'm not taking a side in the libav/ffmpeg wars, but
my impression is that many distros who had used libav for some time
have switched back and ffmpeg is clearly the more widely used of the
forks.)


We’d love to have FFmpeg in-scope, but the simple reason is that they don’t
reply to our e-mails. All projects participating must explicitly opt-in,
and we can’t get anybody at FFmpeg to let us know their thoughts on if they
would like to be added or not.

If somebody could help with that (or at least put us in contact with the
appropriate folks), would appreciate it. :-)

~reed
(For the IBB)

Current thread: