Comment on VLC 3.0.7 and securityComments−Aissen7yWhat's interesting here is that the VLC team (partially) implemented what Alex Ionescu called for in the conclusion of his SSTIC 2019 keynote "Pay for the fix, not for the bug":https://www.sstic.org/2019/presentation/keynote_2019/They did pay for the bugs, but with "large extra-bonuses for fixes". Maybe this will pave the road to a different approach.−archgoon7yThis seems like it would incentivize simply selling to grey markets.−baby7yIf you're an asshole there isn't much they can do.−m1sta_7yCriminal.
Comments
What's interesting here is that the VLC team (partially) implemented what Alex Ionescu called for in the conclusion of his SSTIC 2019 keynote "Pay for the fix, not for the bug":
https://www.sstic.org/2019/presentation/keynote_2019/
They did pay for the bugs, but with "large extra-bonuses for fixes". Maybe this will pave the road to a different approach.
This seems like it would incentivize simply selling to grey markets.
If you're an asshole there isn't much they can do.
Criminal.