3 ms·
I might be missing some context, but I am deeply unimpressed with how Rémi Denis-Courmont chose to handle this. As far as I can tell, Rodger Combs gave a perfec
by jdietrich 8y ago
I might be missing some context, but I am deeply unimpressed with how Rémi Denis-Courmont chose to handle this. As far as I can tell, Rodger Combs gave a perfectly lucid explanation of a plausible threat model. If this is how the VLC developers typically handle security issues, then I'm unsurprised that the EU has decided to offer a bug bounty.
https://www.zdnet.com/article/eu-to-fund-bug-bounty-programs-for-14-open-source-projects-starting-january-2019/ https://www.zdnet.com/article/eu-to-fund-bug-bounty-programs...
- deleted 8y ago[deleted]
- coldtea 8y agoWell, it's not the first time he has been controversial, e.g: http://cdm.link/2011/01/as-apple-pulls-gpl-licensed-vlc-the-developers-version-of-events-what-it-means-for-free-video-2/ http://cdm.link/2011/01/as-apple-pulls-gpl-licensed-vlc-the-... https://www.reddit.com/r/apple/comments/h6jmp/r%C3%A9mi_deniscourmont_the_asshole_who_got_vlc_off/ https://www.reddit.com/r/apple/comments/h6jmp/r%C3%A9mi_deni... https://arstechnica.com/civis/viewtopic.php?f=14&t=1133166 https://arstechnica.com/civis/viewtopic.php?f=14&t=1133166
- fyjvd90 8y agoIt also helps with integrity of the download.
- johnbellone 8y agoI love the software, but after seeing this interaction would never help out their community.