Live data from Hacker News

$1900 Bug Bounty to Fix the Lenovo Legion Pro 7 16IAX10H's Speakers on Linux

github.com

111–120 of 139 posts

Re: $1900 Bug Bounty to Fix the Lenovo Legion Pro 7 16IAX10H's Speakers on Linux

#111
post #41

Earlier quoted context omitted.

How else is that supposed to work? You either fix a driver in the kernel or a driver outside the kernel, it's not going to make that big of a difference to the person who has to fix it.

The difference is that the end user doesn't have to do it. Someone else is going to do it. Just like it is on Windows.

That only works because Windows has a large marketshare, the day it drops to 10%, users will have to write their own drivers as well

Re: $1900 Bug Bounty to Fix the Lenovo Legion Pro 7 16IAX10H's Speakers on Linux

#112

I wish there was an actual thriving business model like this -- just fixing most annoying bugs, for a price, of commonly used desktop software. Why proprietary software companies cannot or do not want to provide this service is over me. Perhaps I'm too much used to consulting.

Well, if one person spent a month on this, they’d be making about $10/hr. Makes StarBucks barista pay look good… Of course, if they can churn this out closer to 2 days, maybe there is something there. Such a talented person would probably prefer a more certain and higher income.

For a lot of people in the world $10/hr is a fantastic wage. And you get to work at your own pace, probably from home.

Re: $1900 Bug Bounty to Fix the Lenovo Legion Pro 7 16IAX10H's Speakers on Linux

#113
This has been an old problem with Legion laptops. All this will be available free of cost to everyone! Mad respect for people who are pledging their own money and the person who fixed it.

Also, Lenovo Legion Pro 7* are not cheap (not that this would have been justified for cheap laptops).

Shame on Lenovo/ who should have fixed this years ago.

Re: $1900 Bug Bounty to Fix the Lenovo Legion Pro 7 16IAX10H's Speakers on Linux

#114

I wish there was an actual thriving business model like this -- just fixing most annoying bugs, for a price, of commonly used desktop software. Why proprietary software companies cannot or do not want to provide this service is over me. Perhaps I'm too much used to consulting.

Out of all bugs and feature requests, this one is an outlier in that it requires specific hardware to work on and has an obvious success condition. This means that every man and his dog is not going to be throwing an LLM at this to see if their particular slop wins the prize. People get weird when money is on the line and managing a bounty is a job for which I would never volunteer.

Re: $1900 Bug Bounty to Fix the Lenovo Legion Pro 7 16IAX10H's Speakers on Linux

#115

I wish there was an actual thriving business model like this -- just fixing most annoying bugs, for a price, of commonly used desktop software. Why proprietary software companies cannot or do not want to provide this service is over me. Perhaps I'm too much used to consulting.

Since you are talking about proprietary software, I assume you mean fixing bugs by the corpo devs themselves.

Well, this would imply broken software. You already payed for the software, now you are required to pay to get bugs fixed? Bad optics, although not beyond contemporary sentiments... Inherently shady incentives: https://en.wikipedia.org/wiki/Perverse_incentive

This kinda only works best for FOSS, incentivizing external devs IMO.

Re: $1900 Bug Bounty to Fix the Lenovo Legion Pro 7 16IAX10H's Speakers on Linux

#116
If there's some Lenovo EU rep with enough budget for their department, this person should really be contracted to fix the audio from their laptops one by one. This seemed to take 2 weeks with a dedicated person and remote access but debugging with access to the device could be much faster!

Re: $1900 Bug Bounty to Fix the Lenovo Legion Pro 7 16IAX10H's Speakers on Linux

#117
post #89

Earlier quoted context omitted.

Why not? In much of the world, working on one of those a month would provide a comfortable living.

This $1900 bug bounty is quite an outlier, you generally won’t find one per month. An additional challenge is that it’s hard to predict how much work something will take, or whether there are any showstoppers. Also, if you don’t live in the same country as the client, it will be more difficult to get legal assurance that you’ll receive your money (or for the client that they won’t lose their money).

You bought up a lot of points. And I think they are all negligible, compared to the gigantic elephant in the room.

Which is, in order for some rando to fix the bug; a company would need to give access to their codebase to some rando.

And they don't wanna do that.

Re: $1900 Bug Bounty to Fix the Lenovo Legion Pro 7 16IAX10H's Speakers on Linux

#118
post #28

I wish there was an actual thriving business model like this -- just fixing most annoying bugs, for a price, of commonly used desktop software. Why proprietary software companies cannot or do not want to provide this service is over me. Perhaps I'm too much used to consulting.

For small stuff, the cost is just going to be too much for people to want to pay it. This bug had a $1900 bounty attached. Let's put the cost of one software engineer (salary plus overheads) at $200,000 a year, which I think is an underestimate. That's $3850 a week, so unless your bug can definitely be fixed (including getting any necessary hardware, investigation, fixing, code review overhead, etc) in two or three d…

You don't need to hire American expensive, but not so productive, engineers, there are lot of other countries. Also, there are ML models.

Re: $1900 Bug Bounty to Fix the Lenovo Legion Pro 7 16IAX10H's Speakers on Linux

#119

If there's some Lenovo EU rep with enough budget for their department, this person should really be contracted to fix the audio from their laptops one by one. This seemed to take 2 weeks with a dedicated person and remote access but debugging with access to the device could be much faster!

Those two weeks probably would've been two days had the main developer been able to reboot and test the device directly.

Outsourcing this work to outside developers on the regular probably would make the media claim something like "Lenovo is too lazy to pay their people to make their speakers work so they make strangers on the internet do it instead" which isn't half false.

It'd probably be better and cheaper if they'd just hire someone to make their speakers work on Linux.

Re: $1900 Bug Bounty to Fix the Lenovo Legion Pro 7 16IAX10H's Speakers on Linux

#120

Earlier quoted context omitted.

For many large companies or even teams, there exists a class of bugs / issues / features where dropping 5-10k on a bounty is extremely cost efficient compared to working around the issue or internal development. That might not fund development outright, but at worst it would point out the features people want and serve to inform what to work on next. I think there are a couple reasons why that is not prevalent. Most…

I’m confused. Bounties for security holes make sense because you don’t need to submit the patch, just find the hole. And bounties for open source (like in this case) also make sense because you have everything you need to submit a patch. But for everything else (like big tech, startups, and so on) bounties can’t fix bugs because even if I find a bug, how am I going to patch it without access to the source code? How c…

You can fix bugs without source lots of ways, although many are arcane and finicky. An example of a healthy and productive ecosystem for this is in game modding. Sometimes this relies on vendor supplied tools (like a modkit, e.g. Elder Scrolls games), messing with bytecode directly (Minecraft until recently), or some cooperation from the vendor (Dwarf Fortress).

In all of those cases users/players were able to fix bugs and add desired functionality (mostly) independently, on a closed-source program.

For industrial software you don't see as much, even though arguably cracks (to skip license check) qualify here.

Post reply on HN