The current FFmpeg situation.

Linus 🩷

@FFmpeg That's me when I find a bug wtf I immediately call my mom

@FFmpeg I keep my found bugs hidden and pray for them to go unpatched so I can leverage them....

@FFmpeg Smart

@FFmpeg So they should not publicly disclose bugs and just leave them hiding for users to get rekt? I get that you can't really demmand the maintainers to fix things and you should send a patch but leaving unsuspecting users vulnerable is not right

@FFmpeg There is difference between saying : - hi guys. I randomly found this bug which concern a very unused codec from the 90, do you need help or can you handle it by yourselves ? and - Hi. I represent a multitrillion dollar company. Fix this bug ASAP or I'll disclose to everybody.

@FFmpeg DIfference is who speaks to who and how. If I find a bug in a major (profitable) company on my freetime, I won't help them fix. I I find in a project run by volunteers, I'll help. If I do so working for a large profitable company, I expect my management to help me do so.

@FFmpeg What if you find a bug in a oss project that runs without profit lets say ffmpeg but you don't know how to fix it or you don't want to, should you never disclose it after some time lets say 30 days after they received the bug report?

@FFmpeg Of course I would if my previous friendly email has been ignored for too long. But I'm and individual and not a major profitable company (relying on this software for some stuff I guess).

@FFmpeg Yeah I agree Google should try to fix it and they should probably donate aswell while they are at it!

@FFmpeg They could start donating a few billions retroactively based on the beginnings of youtube.

@FFmpeg Damn it's true Youtube probably runs on ffmpeg I never thought about it, crazy

@FFmpeg Lmao what an idiot. How does finding bugs bring in business? Nobody comes to a security researcher to find bugs. They aren't shopping for them.

@FFmpeg "What an idiot" fired to the guy who created linux and git. Must be pretty solid to say that dude.

@FFmpeg How does that mean he can't be an idiot? So because he made Linux and Git, everything that comes out of his mind is infallible? 🤣

@FFmpeg That means more that "bingus man" blue check. Saying

@FFmpeg Lmao. Imagine getting mad at someone over a gifted premium sub. 😂 🤡

@FFmpeg Shout-out to @wagieweeb for gifting me the sub and making haters mad.

@IceSolst @FFmpeg The dude sits on the stage, everyone in the room looks at him, lights on him, all attention on him. Yet he complains that someone wants a recognition for their work. Douche

@FFmpeg the only one making a lot of noise about this is ffmpeg though

@FFmpeg I remembered this:

@FFmpeg Good security people hide vulnerabilities, wow iam doing the wrong thing for years.

@FFmpeg 😂😂

@FFmpeg Linus is insufferable

@FFmpeg Good security people sell their bugs to "entities".

@FFmpeg Oh good, the voice of reason is here.

@FFmpeg 💯

@FFmpeg

@FFmpeg I'm lost. Some context?

@FFmpeg Exactly this

@FFmpeg The 'good' security people are too busy reviewing the aforementioned nonsense bug bounty requests to actually find bugs themselves!

@FFmpeg sa4ar plz respect

@FFmpeg I was actually thinking of another comment by Linus earlier today...

@FFmpeg Good summary of the situation!

@FFmpeg Source:

@FFmpeg no sir. i have freight. lets discuss it at once. or you will be shot upon. goodbye. we dont give a shit.

@FFmpeg @grok Find the source of this clip

@FFmpeg “I just want to make you aware” and “I told you so “ never built or fixed a goddamn thing.

@FFmpeg @grok explain joke