16 ms·
so suddenly the onus of developing the threat model is on the user? I believe both devs and users should have the liberty to discuss and propose threat models,
by DoctorOetker 8y ago
so suddenly the onus of developing the threat model is on the user?
I believe both devs and users should have the liberty to discuss and propose threat models, but if there already is "some level of precaution" the real question is where was the previous threat model that dictates signing? or is this security theater?
- NicoJuicy 8y agoIf the developers think there is no threat. Then yes, it is for the user to prove this.
- DoctorOetker 8y agoyou can't prove a threat model. a threat model is part of what is in or out of scope. the first thing that should happen is for VLC dev to set up a threat model, if the user base disagrees with the narrow scope of the VLC threat model they should fork. the second thing that can then happen is that given a threat model, a user could file a bug report to complain how a certain hypothetical attack (within scope of the threat model) violates the security. think about it this way: for all non-security bugs, would you ask users to "prove that resolving a certain bug is within scope of the project"? how can a user prove what is within the developers' scope?
- theamk 8y agoI think you are making a wrong analogy here. A "threat model" in security is like a "user operation" for the feature. So in the non-security bug world, the exchange would look like: Bug report: the program is missing blue circle in the top right corner. Please add is ASAP. Developer response: what would possibly be the use of this feature? Please tell me of I will close the bug.
- NicoJuicy 8y agoHere is a decent developer response: https://www.beauzee.fr/2017/07/04/videolan-and-https/ https://www.beauzee.fr/2017/07/04/videolan-and-https/