2 ms·
Do you have any examples of Google submitting vulnerabilities and refusing to assist maintainers create a patch when asked to do so?
by limagnolia 3mo ago
Do you have any examples of Google submitting vulnerabilities and refusing to assist maintainers create a patch when asked to do so?
- finnthehuman 3mo agoWasn’t that a story with ffmpeg a few months ago? And people were getting roasted for even the suggestion that google should contribute patches?
- Dylan16807 3mo agoPeople were getting rightly roasted for calling google a leech when A) google does donate money to ffmpeg and B) that bug was in a weird format google almost certainly has disabled so they're not reporting it to get free labor.
- limagnolia 3mo agoFrom the horses mouth: "Michael Niedermayer, a leading FFmpeg developer, tweeted, “I am the main developer fixing security issues in FFmpeg. I have fixed over 2700 Google OSS fuzz issues. I have fixed most of the BIGSLEEP issues. And i disagree with the comments FFmpeg (Kieran) has made about Google. From all companies, Google has been the most helpful & nice.” https://thenewstack.io/ffmpeg-to-google-fund-us-or-stop-sending-bugs/ https://thenewstack.io/ffmpeg-to-google-fund-us-or-stop-send... Sounds like Google has been very helpful and nice.
- LtWorf 3mo agohttps://linuxiac.com/libxml2-becomes-officially-unmaintained/ https://linuxiac.com/libxml2-becomes-officially-unmaintained...
- oneshtein 3mo ago[dead]
- limagnolia 3mo agoMaybe you posted the wrong link- I don't see anything at all about Google making a report or being asked to do anything and declining?