5 ms·
> it is unreasonable for a trillion-dollar corporation like Google, which heavily relies on FFmpeg in its products, to shift the workload of fixing vulnerabilit
by insane_dreamer 1y ago
> it is unreasonable for a trillion-dollar corporation like Google, which heavily relies on FFmpeg in its products, to shift the workload of fixing vulnerabilities to unpaid volunteers. They believe Google should either provide patches with vulnerability reports or directly support the project’s maintenance.
This is so basic it shouldn't even have to be said.
- Dylan16807 1y agoThe first part is technically true but doesn't apply to this situation. "Shift the workload"? This isn't google's bug, and google doesn't need it fixed. It was never their workload, and has not been shifted. The last part is just wrong. Google does directly support the project's maintenance.
- insane_dreamer 1y agoIt wasn't paying the people who it was expecting to fix the bug.