From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTPS id 840BD4BDF5 for ; Mon, 3 Feb 2025 19:14:28 +0000 (UTC) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id 6761B68B072; Mon, 3 Feb 2025 21:14:24 +0200 (EET) Received: from relay7-d.mail.gandi.net (relay7-d.mail.gandi.net [217.70.183.200]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id 2BD2D68A4FA for ; Mon, 3 Feb 2025 21:14:18 +0200 (EET) Received: by mail.gandi.net (Postfix) with ESMTPSA id 6F1D24423F for ; Mon, 3 Feb 2025 19:14:17 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=niedermayer.cc; s=gm1; t=1738610057; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=ZUZOYSeGh32n/2iCzI7roGZ2KB7Z146h4Je+Q+PGTQA=; b=Z+FGbwsMBwr1+CVojkuppR6nJ69CrpNWXr1GkEPbREV1aS0aiAWwb8f3lUPpL8oSGKBUdn r9RJh6DVBYTbywWx4FnvirNLGlnAUASk5JWaAvaIM/rlAFAkeYbcoOcwQeQwsylrwe5ozs nYjP732DAT/bAGZZcJ7fl7tSkmkrfCCPw1IkHEoc/Qs+kU/ZX8GIvYCs0Ps1EG7dsRw9VI FY4ZMibBVeq7l5jgupzzJom5NEfRgz6xAdszKjDl9E+omfgMmUYjlmrM3APH/FzWVERD1l Ws7QoC/W7Un5z4OGmqpNT1AuWTk8hkPuTTXIaLLoj6GSppY0J1UVAfcTX48Zhw== Date: Mon, 3 Feb 2025 20:14:16 +0100 From: Michael Niedermayer To: FFmpeg development discussions and patches Message-ID: <20250203191416.GA4991@pb2> References: <20250129203321.GB4991@pb2> <20250130004313.GB17613@haasn.xyz> <9dacff42-0536-4736-922b-0d791d63ef61@gmail.com> <20250201004948.GH4991@pb2> <64fdd98f-23ed-45ca-943e-011f223d20f9@gmail.com> <20250201215325.GT4991@pb2> <45c37d06-f49b-42ff-a841-64cfaa513af4@gmail.com> MIME-Version: 1.0 In-Reply-To: <45c37d06-f49b-42ff-a841-64cfaa513af4@gmail.com> X-GND-State: clean X-GND-Score: -70 X-GND-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgddukeegudcutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfitefpfffkpdcuggftfghnshhusghstghrihgsvgenuceurghilhhouhhtmecufedtudenucesvcftvggtihhpihgvnhhtshculddquddttddmnegfrhhlucfvnfffucdlfedtmdenucfjughrpeffhffvuffkfhggtggujgesghdtreertddtvdenucfhrhhomhepofhitghhrggvlhcupfhivgguvghrmhgrhigvrhcuoehmihgthhgrvghlsehnihgvuggvrhhmrgihvghrrdgttgeqnecuggftrfgrthhtvghrnhepieegkedtjeduffejhfetgeejtdegteetgfegtdfhjefgvefhteegkeejtddvhfevnecukfhppeeguddrieeirdeijedruddufeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeeguddrieeirdeijedruddufedphhgvlhhopehlohgtrghlhhhoshhtpdhmrghilhhfrhhomhepmhhitghhrggvlhesnhhivgguvghrmhgrhigvrhdrtggtpdhnsggprhgtphhtthhopedupdhrtghpthhtohepfhhfmhhpvghgqdguvghvvghlsehffhhmphgvghdrohhrgh X-GND-Sasl: michael@niedermayer.cc Subject: Re: [FFmpeg-devel] Democratization work in progress draft v2 X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Content-Type: multipart/mixed; boundary="===============7073962356791657759==" Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" Archived-At: List-Archive: List-Post: --===============7073962356791657759== Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="xqcL4mfjZO3Hl0Uz" Content-Disposition: inline --xqcL4mfjZO3Hl0Uz Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi On Sun, Feb 02, 2025 at 03:14:58PM -0300, James Almer wrote: > On 2/1/2025 6:53 PM, Michael Niedermayer wrote: > > Hi James > >=20 > > On Sat, Feb 01, 2025 at 10:30:21AM -0300, James Almer wrote: > > > On 1/31/2025 9:49 PM, Michael Niedermayer wrote: [...] > , the text points this out in a mocking/ironic way. > > If you want me to reword this in a dry formal way, i can submit such a = patch? > >=20 > > If not, how do you suggest we move forward here ? > > We can replace the GA by a system that is not vulnerable >=20 > I ask again, do you have any reason other than an hypothetical scenario to > think the GA is vulnerable? Isnt every vulnerability that was reported to us a "hypothetical" scenario ? > Or can you mention a point during the last five > years where any such a vulnerability was taken advantage of? Lets assume we have 2 projects in one the vulnerability was taken advantage= of while in the other it was not. How would you tell them apart ? in both these universes 11 people join over the course of a year In one universe these are all just random new developers. In the other they are payed to gain vote power and control. If you list their names from both of these universes, you will notice a shocking detail in both universes, its the same people, just in one they where payed and in the other they joined for their own reasons. I hope you see that we cannot detect this Then how would "not detecting" this, mean anything ? thx [...] --=20 Michael GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB Many things microsoft did are stupid, but not doing something just because microsoft did it is even more stupid. If everything ms did were stupid they would be bankrupt already. --xqcL4mfjZO3Hl0Uz Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iF0EABEKAB0WIQSf8hKLFH72cwut8TNhHseHBAsPqwUCZ6EVhAAKCRBhHseHBAsP q0P+AJ0XlQ+c4swQ8Y9PPbqjRG4LlypzuwCffZGo0qYuoP8sCiG3UK81F/QtY7A= =coYu -----END PGP SIGNATURE----- --xqcL4mfjZO3Hl0Uz-- --===============7073962356791657759== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe". --===============7073962356791657759==--