[FFmpeg-devel] [PATCH] Fix compilation on OpenBSD

Andrew Savchenko bircoph
Fri Nov 21 09:51:06 CET 2008


On Thursday 20 November 2008 11:00, Michael Niedermayer wrote:
> On Wed, Nov 19, 2008 at 08:10:07PM -0500, The Wanderer wrote:
> > Michael Niedermayer wrote:
> > > Now one has to wonder why outdated software is supposed to
> > > be more secure ...
> >
> > More secure than more recent software? It probably isn't.

This highly depends on security policy and a lot of other factors. 
There are two extremities: to use only old, definitely stable and 
verified with ages versions, and to be always on the leading edge 
with the most advanced security innovices and updates made so 
frequently, that no attacker will be able to use any publishly 
known security issues. And there are plenty of varieties in 
between, afaik the most oftenly used approach is the first 
extrimity mentioned with the exception for security updates.

> > More secure than whatever random things users (possibly even
> > intentionally malicious users) might choose to install? I
> > should think that would be obvious.
> i agree but i did not had the feeling that there where any
> meassures in place to prevent users from building their own
> stuff, so at least malicious users should not be negatively
> affected.

Currently our users may build their own local stuff but without any 
effect on the main system. I was personally granted the ability to 
install system-wide software, but I refused to use it blindly for 
gmake update.

BTW, I updated gmake and encountered some build problems with 
FFmpeg. But IMO they're not worth reporting/fixing until the whole 
operating system will be updated, otherwise it's very hard to 
separate system- and FFmpeg-related bugs, and if I'll report here 
something which will occur to be not an FFmpeg bug, I afraid, I'll 
be blamed.

Best regards,
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://lists.mplayerhq.hu/pipermail/ffmpeg-devel/attachments/20081121/5ea7996d/attachment.pgp>

More information about the ffmpeg-devel mailing list