2 ms·

They are different because the independent researchers don't make money off the projects that they investigate.

• Dylan16807 11mo ago
  Google makes money off ffmpeg in general but not this part of the code. They're not getting someone else to write a patch that helps them make money, because google will just disable this codec if it wasn't already disabled in their builds. Also in general Google does investigate software they don't make money off.
  • samus 11mo ago
    > Also in general Google does investigate software they don't make money off. An organization of this size might actually have trouble making sure they really don't use code from that project. Or won't do so in the future.
• chii 11mo ago
  > independent researchers don't make money off the projects that they investigate but they make money off the reputational increase they earn for having their name attached to the investigation. Unless the investigation and report is anonymous and their name not attached (which, could be true for some researchers), i can say that they're not doing charity.
  • samus 11mo ago
    That's a one-time bonus they get for discovering a bug, not from using the project on production. Google also gets this reward by the way. Therefore it's still imbalanced.