VLC developers refuse to consider updates over HTTPS

Re:VLC developers refuse to consider updates over HTTPS by jdietrich on Saturday January 19, 2019 @01:30PM (#18948386)

I might be missing some context, but I am deeply unimpressed with how Rémi Denis-Courmont chose to handle this. As far as I can tell, Rodger Combs gave a perfectly lucid explanation of a plausible threat model. If this is how the VLC developers typically handle security issues, then I'm unsurprised that the EU has decided to offer a bug bounty.

https://www.zdnet.com/article/eu-to-fund-bug-bounty-programs...

[ Parent | on HN ]

Re:VLC developers refuse to consider updates over HTTPS by coldtea on Saturday January 19, 2019 @01:41PM (#18948444)

Well, it's not the first time he has been controversial, e.g:

http://cdm.link/2011/01/as-apple-pulls-gpl-licensed-vlc-the-...

https://www.reddit.com/r/apple/comments/h6jmp/r%C3%A9mi_deni...

https://arstechnica.com/civis/viewtopic.php?f=14&t=1133166

[ Parent | on HN ]

Re:VLC developers refuse to consider updates over HTTPS by temac on Saturday January 19, 2019 @02:00PM (#18948560)

I saw no controversy in at least the second (reddit) link, appart from an anonymous coward insulting him and making random gratuitous hypothesises - moreover likely unrelated to anything...

[ Parent | on HN ]

Re:VLC developers refuse to consider updates over HTTPS by coldtea on Sunday January 20, 2019 @09:38AM (#18953219)

Isn't having some people against you the very definition of controversy?

[ Parent | on HN ]

Re:VLC developers refuse to consider updates over HTTPS by johnbellone on Saturday January 19, 2019 @02:01PM (#18948565)

I love the software, but after seeing this interaction would never help out their community.

[ Parent | on HN ]

Re:VLC developers refuse to consider updates over HTTPS by fyjvd90 on Saturday January 19, 2019 @01:54PM (#18948523)

It also helps with integrity of the download.

[ Parent | on HN ]