(twitter.com)

104 points trollied | 1 comments | 01 Nov 25 20:59 UTC | HN request time: 0.215s | source

Show context

PaulKeeble ◴[01 Nov 25 21:46 UTC] No.45785696[source]▶

"Just send patches" is I think the main point. Rather than just reporting security bugs these big organisations ought to start seeing the point of open source being that can and should be contributing if they value the project and need this fixed because its a pretty obscure problem generated by AI.

replies(4): >>45785935 #>>45786972 #>>45788047 #>>45789281 #

tjpnz ◴[02 Nov 25 10:30 UTC] No.45789281[source]▶

>>45785696 #

YouTube made $36.7 billion last year. Time they started pulling their weight.

replies(1): >>45794039 #

1. kyrra ◴[02 Nov 25 22:33 UTC] No.45794039[source]▶

>>45789281 #

They have around at least 3000 commits, assuming this search is right?

https://github.com/search?q=repo%3AFFmpeg%2FFFmpeg+%40google...

And they have done large pushes in the past: https://security.googleblog.com/2014/01/ffmpeg-and-thousand-...

↑

FFmpeg dealing with a security researcher