News for hackers. Stuff that matters.

A comment on About the “Security Issue” on VLC. Parent comment

Re:About the “Security Issue” on VLC by jbk on Wednesday July 24, 2019 @06:49AM (#20513860)
> To boot https://www.securityfocus.com/bid/109304 claims all versions are vulnerable and the vendor reported it

Of course, we never reported such a thing: a security issue in a 3rd party library, fixed more than 16months ago. And VLC binaries were updated 16months ago too...

The issue is that MITRE is not doing its job when assigning the CVE or even checking the validity of the claim. But they refuse to talk to us. Why?

[ Parent | on HN ]
Re:About the “Security Issue” on VLC by dsfyu404ed on Wednesday July 24, 2019 @08:00AM (#20514265)
>But they refuse to talk to us. Why?

Because stonewalling is SOP for government bureaucracies when they screw up.

When you're the government the various systems the people you screwed have for recourse work slightly differently so stonewalling works better than spewing out a ton of deny and distract PR like corporations do.

[ Parent | on HN ]
Re:About the “Security Issue” on VLC by majewsky on Wednesday July 24, 2019 @11:02AM (#20515943)
> Because stonewalling is SOP for big orgs when they screw up.

FTFY

A lot of people seem to be under the impression that when you just privatize a government agency, it magically becomes better. It doesn't.

[ Parent | on HN ]