News for hackers. Stuff that matters.

A comment on EU to fund bug bounty programs for open-source projects. Parent comment

Re:EU to fund bug bounty programs for open-source projects by justaj on Sunday December 30, 2018 @09:29AM (#18789312)
Is mpv [0] better in this regard?

0: https://mpv.io/

[ Parent | on HN ]
Re:EU to fund bug bounty programs for open-source projects by kilotaras on Sunday December 30, 2018 @11:38AM (#18789921)
GP isn't saying that VLC is unsafe, but rather that C (which VLC is written in) tends to be unsafe. Seeing as MPV is also written in C, it's absolutely the same in that regard.
[ Parent | on HN ]
Re:EU to fund bug bounty programs for open-source projects by Nullabillity on Monday December 31, 2018 @08:34AM (#18794408)
AFAIK both VLC and mpv use FFmpeg's codecs, so their attack surfaces should be similar.
[ Parent | on HN ]