Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

$1900 Bug Bounty to Fix the Lenovo Legion Pro 7 16IAX10H's Speakers on Linux

github.com

Post reply on HN
Print view View original

131–139 of 139 posts

Re: $1900 Bug Bounty to Fix the Lenovo Legion Pro 7 16IAX10H's Speakers on Linux

#131

Post by jaredklewis »

Y_Y wrote: post #120
jaredklewis wrote: post #95

Earlier quoted context omitted.

I’m confused. Bounties for security holes make sense because you don’t need to submit the patch, just find the hole. And bounties for open source (like in this case) also make sense because you have everything you need to submit a patch. But for everything else (like big tech, startups, and so on) bounties can’t fix bugs because even if I find a bug, how am I going to patch it without access to the source code? How c…

You can fix bugs without source lots of ways, although many are arcane and finicky. An example of a healthy and productive ecosystem for this is in game modding. Sometimes this relies on vendor supplied tools (like a modkit, e.g. Elder Scrolls games), messing with bytecode directly (Minecraft until recently), or some cooperation from the vendor (Dwarf Fortress). In all of those cases users/players were able to fix bu…

That seems different to me: a user can download and run a mod, but the fix isn’t then a part of the game itself and available by default to all users. Unless of course the real developers back port it to the game, but that’s just the kind of development effort the parent’s comment seems to be seeking to avoid.

The parent seems to be talking about the companies using bug bounties as a way to fix bugs in their software and the fixes becoming part of that software (not a separate mod run on top).

Re: $1900 Bug Bounty to Fix the Lenovo Legion Pro 7 16IAX10H's Speakers on Linux

#132

Post by toast0 »

espdev wrote: post #130
toast0 wrote: post #92

Earlier quoted context omitted.

$100 gets you a usb sound card and $90 for something else. It's not a good solution, but it's easy.

The sound only does not work from the laptop speakers; wired headphones work perfectly. Sometimes you want your laptop speakers to produce sound. So an external sound card does not solve the problem. It's funny, but for as long as I can remember Linux (20+ years), there have always been some problems with sound.

You can buy usb speakers too. Or 3.5mm speakers since the headphone jack works. Either way, way less than $100 (especially for laptop quality).

On the plus side, if the built in speakers never work, the computer won't make noise unless you've plugged in something which is a nice feature.

Re: $1900 Bug Bounty to Fix the Lenovo Legion Pro 7 16IAX10H's Speakers on Linux

#133

Post by Y_Y »

jaredklewis wrote: post #131
Y_Y wrote: post #120

Earlier quoted context omitted.

You can fix bugs without source lots of ways, although many are arcane and finicky. An example of a healthy and productive ecosystem for this is in game modding. Sometimes this relies on vendor supplied tools (like a modkit, e.g. Elder Scrolls games), messing with bytecode directly (Minecraft until recently), or some cooperation from the vendor (Dwarf Fortress). In all of those cases users/players were able to fix bu…

That seems different to me: a user can download and run a mod, but the fix isn’t then a part of the game itself and available by default to all users. Unless of course the real developers back port it to the game, but that’s just the kind of development effort the parent’s comment seems to be seeking to avoid. The parent seems to be talking about the companies using bug bounties as a way to fix bugs in their software…

> even if I find a bug, how am I going to patch it without access to the source code?

That's how. Bethesda put a mod manager in Skyrim and works with some of the developers, they distribute fixes as game patches, you can distribute yours as "mods" or let them repackage it into an official patch or the next update.

https://en.uesp.net/wiki/Skyrim_Mod:Unofficial_Skyrim_Patch

Re: $1900 Bug Bounty to Fix the Lenovo Legion Pro 7 16IAX10H's Speakers on Linux

#134

Post by jaredklewis »

Y_Y wrote: post #133
jaredklewis wrote: post #131

Earlier quoted context omitted.

That seems different to me: a user can download and run a mod, but the fix isn’t then a part of the game itself and available by default to all users. Unless of course the real developers back port it to the game, but that’s just the kind of development effort the parent’s comment seems to be seeking to avoid. The parent seems to be talking about the companies using bug bounties as a way to fix bugs in their software…

> even if I find a bug, how am I going to patch it without access to the source code? That's how. Bethesda put a mod manager in Skyrim and works with some of the developers, they distribute fixes as game patches, you can distribute yours as "mods" or let them repackage it into an official patch or the next update. https://en.uesp.net/wiki/Skyrim_Mod:Unofficial_Skyrim_Patch

Yes I’m aware of this sort of thing.

I guess maybe it could apply to some niche cases of locally run software like photoshop, though I’d be be shocked if the marginal gains of a bug bounty program could justify the massive cost of implementing a mod system like this for photoshop.

But the fact is that most software in the world doesn’t work like Skyrim. Large parts of most software runs on servers or on locked down mobile operating systems where modding systems are not possible.

What you are proposing kind of already exists for web frontends in the form of browser extensions, but having worked on several apps for which an ecosystem of browser extensions sprung up, my experience is that there is no simple way to port these features to the main product. For security and QA, every line of code needs to be vetted anyway, and then “translated” into a form appropriate for the existing code base. At most, they just validate demand for a feature or bug fix.

Re: $1900 Bug Bounty to Fix the Lenovo Legion Pro 7 16IAX10H's Speakers on Linux

#135

Post by firesteelrain »

LgWoodenBadger wrote: post #129
firesteelrain wrote: post #76

Earlier quoted context omitted.

I have used it every day for past 3-4 years. What bugs? I don’t love it but I don’t hate it either. I don’t understand the Teams hate

It asks me a quality survey after every call even though I have surveys off. It shows unread messages for a chat that has the focus and the “unread” message is visible. When using the keyboard shortcut to create a new message (Command-N) it drops the first character of the recipient unless I introduce a noticeable delay between shortcut and recipient. I’m sure I have more, but these are just from memory.

I just click the X rather than leave and I don’t get the survey popup. I mute most of the group chats. But it still shows unread so I know to go back and look at them

Re: $1900 Bug Bounty to Fix the Lenovo Legion Pro 7 16IAX10H's Speakers on Linux

#136

Post by zipy124 »

firesteelrain wrote: post #76
fragmede wrote: post #25

Earlier quoted context omitted.

and yet, Microsoft Teams is a total trash fire full of bugs that users hate. So something is broken (Teams. It's Teams that is busted).

I have used it every day for past 3-4 years. What bugs? I don’t love it but I don’t hate it either. I don’t understand the Teams hate

If I try to play a video in a chat, and then press the three dots to go full screen or change quality or scroll through the video, it just jumps to the top of the chat. Messages do not sync between devices. Microphone or video sometimes do not work and requires a restart. Sending attachments often just results in a failed message. Note these happen on all the OS I have triend on high end devices and on extremely high end internet 10-gigabit.

There is also just feature jank like for instance you cannot have two instances open at the same time if you have two organisations that you work for, you have to switch constantly. This is a disaster for any consultants or contractors who are placed in-org on teams.

The calendar space for an all day event takes up a sliver of space on the calendar, meaning people will often instead schedule an event for 9-5 or worst case 12-12 hours so it's not missable on the calendar easily etc...

Re: $1900 Bug Bounty to Fix the Lenovo Legion Pro 7 16IAX10H's Speakers on Linux

#137

Post by LtWorf »

codedokode wrote: post #118
pm215 wrote: post #28

Earlier quoted context omitted.

For small stuff, the cost is just going to be too much for people to want to pay it. This bug had a $1900 bounty attached. Let's put the cost of one software engineer (salary plus overheads) at $200,000 a year, which I think is an underestimate. That's $3850 a week, so unless your bug can definitely be fixed (including getting any necessary hardware, investigation, fixing, code review overhead, etc) in two or three d…

You don't need to hire American expensive, but not so productive, engineers, there are lot of other countries. Also, there are ML models.

If you let the ML do it, it means it was so trivial you could have done it yourself faster.

Re: $1900 Bug Bounty to Fix the Lenovo Legion Pro 7 16IAX10H's Speakers on Linux

#138

Post by yeasku »

Thaxll wrote: post #84
akatsutki wrote: post #23

Earlier quoted context omitted.

They're not useful for fixing things like this. Only frontend React.js

You're wrong: https://words.filippo.io/claude-debugging/ https://dmitrybrant.com/2025/09/07/using-claude-code-to-mode...

Clanker.

Re: $1900 Bug Bounty to Fix the Lenovo Legion Pro 7 16IAX10H's Speakers on Linux

#139

Post by jdiff »

realusername wrote: post #111
jdiff wrote: post #41

Earlier quoted context omitted.

The difference is that the end user doesn't have to do it. Someone else is going to do it. Just like it is on Windows.

That only works because Windows has a large marketshare, the day it drops to 10%, users will have to write their own drivers as well

I was highlighting this as a similarity between them, but I see how my comment can be ambiguous. The average Linux user isn't currently writing their own drivers or compiling their own kernels, even with its tiny relative userbase.
Post reply on HN