Date: Mon, 02 Oct 2017 11:01:19 +0000 From: Reed Loden <reed@...dloden.com> To: oss-security@...ts.openwall.com Subject: Re: The Internet Bug Bounty: Data Processing (hackerone.com) On Fri, Sep 29, 2017 at 6:12 AM Hanno Böck <hanno@...eck.de> wrote: > On Thu, 28 Sep 2017 23:13:22 -0700 > Reed Loden <reed@...dloden.com> wrote: > > > Separately, we're happy to announce that libav ( > > https://git.libav.org/?p=libav.git;a=summary) was added to the scope > > earlier today. > > I'm surprised by this. When I saw the ibb-data bounty I immediately > wondered whether ffmpeg should be in there. > > Is there a reason libav is in and ffmpeg is not? Were there concerns by > the ffmpeg devs? (I'm not taking a side in the libav/ffmpeg wars, but > my impression is that many distros who had used libav for some time > have switched back and ffmpeg is clearly the more widely used of the > forks.) We’d love to have FFmpeg in-scope, but the simple reason is that they don’t reply to our e-mails. All projects participating must explicitly opt-in, and we can’t get anybody at FFmpeg to let us know their thoughts on if they would like to be added or not. If somebody could help with that (or at least put us in contact with the appropriate folks), would appreciate it. :-) ~reed (For the IBB)
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Powered by Openwall GNU/*/Linux - Powered by OpenVZ