[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20171008214807.GA17602@nb4>
Date: Sun, 8 Oct 2017 23:48:07 +0200
From: Michael Niedermayer <michael@...dermayer.cc>
To: oss-security@...ts.openwall.com
Subject: Re: The Internet Bug Bounty: Data Processing (hackerone.com)
Hi
On Mon, Oct 02, 2017 at 11:01:19AM +0000, Reed Loden wrote:
> On Fri, Sep 29, 2017 at 6:12 AM Hanno Böck <hanno@...eck.de> wrote:
>
> > On Thu, 28 Sep 2017 23:13:22 -0700
> > Reed Loden <reed@...dloden.com> wrote:
> >
> > > Separately, we're happy to announce that libav (
> > > https://git.libav.org/?p=libav.git;a=summary) was added to the scope
> > > earlier today.
> >
> > I'm surprised by this. When I saw the ibb-data bounty I immediately
> > wondered whether ffmpeg should be in there.
> >
> > Is there a reason libav is in and ffmpeg is not? Were there concerns by
> > the ffmpeg devs? (I'm not taking a side in the libav/ffmpeg wars, but
> > my impression is that many distros who had used libav for some time
> > have switched back and ffmpeg is clearly the more widely used of the
> > forks.)
>
>
> We’d love to have FFmpeg in-scope, but the simple reason is that they don’t
> reply to our e-mails. All projects participating must explicitly opt-in,
> and we can’t get anybody at FFmpeg to let us know their thoughts on if they
> would like to be added or not.
Your mails where misidentified as spam on my side at least, and while
i admit i saw them and wanted to reply later i forgot and somehow
apparently everyone else forgot to reply too.
Finally replied and yes of course FFmpeg wants to participate
Thanks
>
> If somebody could help with that (or at least put us in contact with the
> appropriate folks), would appreciate it. :-)
>
> ~reed
> (For the IBB)
--
Michael GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB
If a bugfix only changes things apparently unrelated to the bug with no
further explanation, that is a good sign that the bugfix is wrong.
Download attachment "signature.asc" of type "application/pgp-signature" (182 bytes)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
