Hacker News new | ask | show | jobs
by LtWorf 32 days ago
Burning out maintainers isn't "contributing back".
1 comments
limagnolia 32 days ago
Do you have any examples of Google submitting vulnerabilities and refusing to assist maintainers create a patch when asked to do so?
link
finnthehuman 32 days ago
Wasn’t that a story with ffmpeg a few months ago? And people were getting roasted for even the suggestion that google should contribute patches?
link
Dylan16807 32 days ago
People were getting rightly roasted for calling google a leech when A) google does donate money to ffmpeg and B) that bug was in a weird format google almost certainly has disabled so they're not reporting it to get free labor.
link
limagnolia 30 days ago
From the horses mouth: "Michael Niedermayer, a leading FFmpeg developer, tweeted, “I am the main developer fixing security issues in FFmpeg. I have fixed over 2700 Google OSS fuzz issues. I have fixed most of the BIGSLEEP issues. And i disagree with the comments FFmpeg (Kieran) has made about Google. From all companies, Google has been the most helpful & nice.” https://thenewstack.io/ffmpeg-to-google-fund-us-or-stop-send...

Sounds like Google has been very helpful and nice.

link
LtWorf 32 days ago
https://linuxiac.com/libxml2-becomes-officially-unmaintained...
link
limagnolia 30 days ago
Maybe you posted the wrong link- I don't see anything at all about Google making a report or being asked to do anything and declining?
link