Discussion here: https://news.ycombinator.com/item?id=6015509

Also see the response from VLC: http://www.jbkempf.com/blog/post/2013/More-lies-from-Secunia