[FFmpeg-devel] [EXT] Re: Query from Reuters on XZ, open source, and Microsoft

[Satter, Raphael (Reuters)]

Dear Kieran & co.,

Thank you I’ve had a chance to see the talk. It’s a marker of how invisible even critical open source projects can be that I wasn’t aware of FFmpeg’s role in powering the likes of YouTube and Netflix.

A few questions I had:


  *   How much did Microsoft end up paying for the one-time fix?
  *   What’s the solution here? Your talk mentioned paying developers, getting an SLA, or hiring them as consultants … but why would companies bother when they can just free ride? I asked the same question to CISA’s Jack Cable when he told me that  companies need to “contribute back and help build the sustainable open source ecosystem that we get so much value from.” Sure, they “need” to do it, but who will punish them if they don’t?
  *   Any other thoughts you might have on this episode – or others you think I should speak to – would be greatly appreciated.

Raphael

From: Kieran Kunhya <kieran618 at googlemail.com>
Sent: Wednesday, April 3, 2024 12:39 PM
To: FFmpeg development discussions and patches <ffmpeg-devel at ffmpeg.org>
Cc: Satter, Raphael (Reuters) <Raphael.Satter at thomsonreuters.com>
Subject: [EXT] Re: [FFmpeg-devel] Query from Reuters on XZ, open source, and Microsoft

External Email: Use caution with links and attachments.

Hi Raphael,

I was the author of the tweet and I gave a short talk about this topic at Demuxed at a video conference last year: https://m.youtube.com/watch?v=OIyOEuQQsCQ&t=930s<https://urldefense.com/v3/__https:/m.youtube.com/watch?v=OIyOEuQQsCQ&t=930s__;!!GFN0sa3rsbfR8OLyAw!fil3G3T7uUxCpJLVmYwgXrszOLckOVB2iMJMDO7QCKMoC7pWR9np5VcDBSAQwsXzhMcbBH9RL7tMr8KurldS9Ga_7Ai-q2U$>

That said this is a community project and it would be best to continue the discussion on this mailing list unless agreed otherwise.

Regards,
Kieran Kunhya

On Wed, 3 Apr 2024, 16:52 Satter, Raphael (Reuters) via ffmpeg-devel, <ffmpeg-devel at ffmpeg.org<mailto:ffmpeg-devel at ffmpeg.org>> wrote:
Dear FFMPEG community,

This is Raphael Satter, a journalist with Reuters. I saw your thread on X about your experience with Microsoft in the context of the XZ story and would love to follow up with a few questions.

Is there a good person to talk to? I’m reachable using the details below or on Signal/WhatsApp at +1 202 430 9389.

Raphael

💻 raphael.satter at tr.com<mailto:raphael.satter at tr.com>
🌎 raphaelsatter.com<https://urldefense.com/v3/__http:/raphaelsatter.com__;!!GFN0sa3rsbfR8OLyAw!fil3G3T7uUxCpJLVmYwgXrszOLckOVB2iMJMDO7QCKMoC7pWR9np5VcDBSAQwsXzhMcbBH9RL7tMr8KurldS9Ga_d7ggKWg$>
📰 reuters.com/authors/raphael-satter<http://reuters.com/authors/raphael-satter>

Thomson Reuters
1333 H Street NW
Washington, DC 20005

☎️ +1 202 843-6302

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel at ffmpeg.org<mailto:ffmpeg-devel at ffmpeg.org>
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel<https://urldefense.com/v3/__https:/ffmpeg.org/mailman/listinfo/ffmpeg-devel__;!!GFN0sa3rsbfR8OLyAw!fil3G3T7uUxCpJLVmYwgXrszOLckOVB2iMJMDO7QCKMoC7pWR9np5VcDBSAQwsXzhMcbBH9RL7tMr8KurldS9Ga_oyXmFKo$>

To unsubscribe, visit link above, or email
ffmpeg-devel-request at ffmpeg.org<mailto:ffmpeg-devel-request at ffmpeg.org> with subject "unsubscribe".