News for hackers. Stuff that matters.

A comment on About the “Security Issue” on VLC. Parent comment

Re:About the “Security Issue” on VLC by jbk on Wednesday July 24, 2019 @06:52AM (#20513877)
But the biggest issue is that they refuse that we become the CNA for VLC bugs.

So, they are the root CNA for VLC bugs, and they don't triage them correctly. And don't update the issues when we mention them.

[ Parent | on HN ]
Re:About the “Security Issue” on VLC by viraptor on Wednesday July 24, 2019 @07:56AM (#20514247)
Not allowing CNA seems to be the biggest issue. Long time ago we had issues where getting a new cve for an open source project was really rare and hard to achieve. Now anyone who asks gets one without validation. Two extremes, likely due to lack of resources, but they won't share the load...
[ Parent | on HN ]
Re:About the “Security Issue” on VLC by nbabitskiy on Wednesday July 24, 2019 @07:00AM (#20513918)
Why can't you be an authority of your CVEs without consulting an American gov agency? I'm sure, VLC org is way more trustworthy for nine out of ten people on the Earth.
[ Parent | on HN ]
Re:About the “Security Issue” on VLC by jbk on Wednesday July 24, 2019 @07:13AM (#20513981)
Because everyone uses CVE. And then, it gets in the press...
[ Parent | on HN ]