←back to thread

1124 points CrankyBear | 1 comments | | HN request time: 0.223s | source
Show context
pjmlp ◴[] No.45891849[source]
Fully on FFmpeg team side, many companies approach to FOSS is only doing so when it sounds good on their marketing karma, leech otherwise.

Most of them would just pirate in the old days, and most FOSS licences give them clear conscience to behave as always.

replies(2): >>45892276 #>>45892516 #
iscoelho ◴[] No.45892516[source]
Google is, at no cost to FFMPEG:

1) dedicating compute resources to continuously fuzzing the entire project

2) dedicating engineering resources to validating the results and creating accurate and well-informed bug reports (in this case, a seriously underestimated security issue)

3) additionally for codecs that Google likely does not even internally use or compile, purely for the greater good of FFMPEG's user base

Needless to say, while I agree Google has a penny to spare to fund FFMPEG, and should (although they already contribute), I do not agree with funding this maintainer.

replies(3): >>45892589 #>>45892848 #>>45895277 #
FridgeSeal ◴[] No.45892848[source]
Google is:

- choosing to do this of their own volition

- are effectively just using their resources to throw bug reports over the wall unprompted.

- benefiting from the bugs getting fixed, but not contributing to them.

replies(3): >>45893888 #>>45895430 #>>45896037 #
1. iscoelho ◴[] No.45895430[source]
Google is a contributor to FFMPEG.