[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <CALPTtNXNQyq_P5FodjEOpf0J_UBEKWhioRqdGhQLfYOFSQHdiw@mail.gmail.com>
Date: Mon, 02 Oct 2017 11:01:19 +0000
From: Reed Loden <reed@...dloden.com>
To: oss-security@...ts.openwall.com
Subject: Re: The Internet Bug Bounty: Data Processing (hackerone.com)
On Fri, Sep 29, 2017 at 6:12 AM Hanno Böck <hanno@...eck.de> wrote:
> On Thu, 28 Sep 2017 23:13:22 -0700
> Reed Loden <reed@...dloden.com> wrote:
>
> > Separately, we're happy to announce that libav (
> > https://git.libav.org/?p=libav.git;a=summary) was added to the scope
> > earlier today.
>
> I'm surprised by this. When I saw the ibb-data bounty I immediately
> wondered whether ffmpeg should be in there.
>
> Is there a reason libav is in and ffmpeg is not? Were there concerns by
> the ffmpeg devs? (I'm not taking a side in the libav/ffmpeg wars, but
> my impression is that many distros who had used libav for some time
> have switched back and ffmpeg is clearly the more widely used of the
> forks.)
We’d love to have FFmpeg in-scope, but the simple reason is that they don’t
reply to our e-mails. All projects participating must explicitly opt-in,
and we can’t get anybody at FFmpeg to let us know their thoughts on if they
would like to be added or not.
If somebody could help with that (or at least put us in contact with the
appropriate folks), would appreciate it. :-)
~reed
(For the IBB)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
