oss-sec mailing list archives

Re: The Internet Bug Bounty: Data Processing (hackerone.com)


From: Michael Niedermayer <michael () niedermayer cc>
Date: Sun, 8 Oct 2017 23:48:07 +0200

Hi

On Mon, Oct 02, 2017 at 11:01:19AM +0000, Reed Loden wrote:
On Fri, Sep 29, 2017 at 6:12 AM Hanno Böck <hanno () hboeck de> wrote:

On Thu, 28 Sep 2017 23:13:22 -0700
Reed Loden <reed () reedloden com> wrote:

Separately, we're happy to announce that libav (
https://git.libav.org/?p=libav.git;a=summary) was added to the scope
earlier today.

I'm surprised by this. When I saw the ibb-data bounty I immediately
wondered whether ffmpeg should be in there.

Is there a reason libav is in and ffmpeg is not? Were there concerns by
the ffmpeg devs? (I'm not taking a side in the libav/ffmpeg wars, but
my impression is that many distros who had used libav for some time
have switched back and ffmpeg is clearly the more widely used of the
forks.)


We’d love to have FFmpeg in-scope, but the simple reason is that they don’t
reply to our e-mails. All projects participating must explicitly opt-in,
and we can’t get anybody at FFmpeg to let us know their thoughts on if they
would like to be added or not.

Your mails where misidentified as spam on my side at least, and while
i admit i saw them and wanted to reply later i forgot and somehow
apparently everyone else forgot to reply too.
Finally replied and yes of course FFmpeg wants to participate

Thanks


If somebody could help with that (or at least put us in contact with the
appropriate folks), would appreciate it. :-)

~reed
(For the IBB)

-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

If a bugfix only changes things apparently unrelated to the bug with no
further explanation, that is a good sign that the bugfix is wrong.

Attachment: signature.asc
Description: Digital signature


Current thread: