Intelligence agencies vs VLC: "No. We'll never do that" - Lead developer responds | Lex Fridman
VLC's lead developer discusses how he has refused intelligence agency requests for backdoors, explaining that VLC's offline, open-source nature makes surveillance technically impossible. He also shares stories of legitimate government interactions, like helping US troops play videos in Afghanistan, and describes his philosophical approach to stress management.
Summary
The conversation covers several key dimensions of running VLC, an open-source media player used by millions worldwide. The developer draws a contrast between VLC's situation and that of Pavel Durov (Telegram), explaining that because VLC is a purely client-side tool with no platform infrastructure or telemetry, it cannot be held responsible for content users watch, and no government can compel it to censor or surveil users.
On the topic of government and intelligence agency pressure, the developer confirms that two intelligence agencies asked for backdoors to be placed in VLC, and he refused — emphatically. He describes an extreme level of security consciousness in their build process: compiling on air-gapped machines, compiling the compiler itself from scratch, and using double signatures. He also reveals that a non-Western government agency apparently attempted to push a fake binary onto VLC's servers, which alarmed the team greatly.
The developer explains that legal costs, while a concern, are manageable in Europe — less than $10,000 per year — unlike in the US where legal battles can be bankrupting. He also notes that VLC's open-source and internationally distributed nature makes it nearly impossible to kill: if pressured, he could simply move jurisdiction and restart under a new domain, since the code is already publicly available.
On more positive government interactions, he shares two stories: US police asking for help recovering a damaged video file in a murder case (purely a technical support matter), and a US Army soldier during the Afghan war asking for a fix to VLC's RTSP support because troops were using it to watch movies for morale. The developer patched the issue specifically for them.
Finally, the developer discusses his mental approach to the stress of running a small team (six to eight core contributors, with all legal responsibility falling on him alone). He uses a 'worst case scenario' mental model — always asking whether the outcome leads to death or harm to others — and concludes that since the answer is almost always no, the stakes feel manageable. He views VLC as a tool that, like all tools, will be used for both good and bad purposes, and believes that cannot and should not be the tool's responsibility.
Key Insights
- The VLC developer confirms that two intelligence agencies requested backdoors into VLC, and he refused in terms he describes as 'a lot less polite' than a simple no, stating clearly that if they had to compromise the software, they would shut it down entirely.
- VLC's build process is deliberately paranoid for security reasons: binaries are compiled on air-gapped machines that have never been connected to the internet, the compiler itself is compiled from scratch, and a double-signature process is used — motivated in part by a suspected non-Western government agency attempting to push a fake binary onto VLC's own servers.
- The developer argues that VLC is structurally immune to surveillance demands because it has no telemetry, no platform infrastructure, and no visibility into how users use the software — so when authorities asked whether a specific person watched a specific type of video, his honest answer was 'no idea.'
- During the Afghan war, a US Army soldier emailed VLC's developer because an RTSP bug was breaking movie playback for troops using VLC for morale — the developer built and delivered a custom patched version specifically for them, noting VLC was likely approved for US Army laptops because it is fully open source and auditable.
- The developer manages stress by always mentally tracing the worst-case scenario to its endpoint — asking 'am I dead?' or 'am I hurting someone?' — and since the answer for VideoLan's situation is almost always no, he treats adverse outcomes like lawyer threats or financial losses as trivially acceptable, noting that VLC's total assets are around $50,000 and the source code is already public and unstoppable.
Topics
Transcript
[0:02] I mean, is there some paralyzing aspects? You know, if I look at the at the case of somebody I've become close with, Pavel Durov, you know, he was blamed directly by the French government for the kind of things his quote platform was hosting. I could see the same kind of stuff, basically just as an example, VLC being blamed for the kind of videos that people are watching. >> tried, right? Like we had we got like we [0:33] we had issues like like I mean, is that that's the pressure that people worry about because if you have to think about that kind of stuff when you're kind of just obsessed about the >> think about…
Full transcript available for MurmurCast members
Sign Up to AccessMore from Lex Clips
Do antipsychotic drugs work? | Andrew Scull and Lex Fridman
Andrew Scull discusses the efficacy and serious side effects of antipsychotic drugs, explaining that while they help some patients, many are non-responders, and the medications carry substantial risks including tardive dyskinesia, weight gain, metabolic syndrome, and cognitive dulling. The landmark CATIE study revealed that newer, expensive second-generation antipsychotics are no more effective than older first-generation drugs, with 67-82% of patients dropping out due to inefficacy or intolerable side effects.
Surprising origin of antipsychotic drugs | Andrew Scull and Lex Fridman
Andrew Scull explains how chlorpromazine, an antihistamine synthesized in the 1880s, was accidentally discovered to have psychiatric applications in the 1950s through French Navy lieutenant Alain Laborit's experiments. The drug's rapid adoption was driven by pharmaceutical companies' aggressive marketing to politicians and hospital administrators rather than by psychiatrists' initial enthusiasm, transforming it from a 'major tranquilizer' into the first 'antipsychotic' drug.
Cognitive Behavioral Therapy (CBT) vs Psychoanalysis | Andrew Scull and Lex Fridman
Andrew Scull discusses how clinical psychology and cognitive behavioral therapy (CBT) emerged after WWII as alternatives to psychoanalysis, becoming dominant through better empirical evidence, shorter treatment duration, and federal funding advantages. CBT's symptom-focused approach proved more measurable and reproducible than psychoanalytic theory, though its effectiveness remains limited for serious mental disorders.
Do anti-depressant drugs work? | Andrew Scull and Lex Fridman
Andrew Scull discusses the history and efficacy of antidepressants, particularly SSRIs like Prozac, explaining that while they statistically outperform placebo, the clinical improvement is often marginal and comes with significant side effects including sexual dysfunction and withdrawal difficulties. He also addresses 'diagnostic creep' in psychiatry, where conditions become increasingly broadly defined and diagnosed over time.
How drugs and psycho-pharmacology changed mental health | Andrew Scull and Lex Fridman
Andrew Scull traces the accidental discovery of psychopharmacology, beginning with chlorpromazine's unexpected psychiatric effects in the 1950s, and discusses how pharmaceutical companies transformed mental health treatment while also introducing serious side effects like tardive dyskinesia and metabolic complications that remain inadequately addressed.