From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: David Kastrup Newsgroups: gmane.emacs.devel Subject: Re: Image mode Date: Tue, 06 Feb 2007 08:20:56 +0100 Message-ID: <8664afoip3.fsf@lola.quinscape.zz> References: <87k5yxeg19.fsf@jurta.org> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: sea.gmane.org 1170746504 1844 80.91.229.12 (6 Feb 2007 07:21:44 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Tue, 6 Feb 2007 07:21:44 +0000 (UTC) Cc: Reiner Steib , "Kim F. Storm" , emacs-devel@gnu.org, juri@jurta.org, cyd@MIT.EDU, Lars Magne Ingebrigtsen , miles@gnu.org To: rms@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Tue Feb 06 08:21:33 2007 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([199.232.76.165]) by lo.gmane.org with esmtp (Exim 4.50) id 1HEKdw-0000IS-Oh for ged-emacs-devel@m.gmane.org; Tue, 06 Feb 2007 08:21:33 +0100 Original-Received: from localhost ([127.0.0.1] helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1HEKdu-0006fv-1N for ged-emacs-devel@m.gmane.org; Tue, 06 Feb 2007 02:21:30 -0500 Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1HEKdi-0006fi-W1 for emacs-devel@gnu.org; Tue, 06 Feb 2007 02:21:19 -0500 Original-Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1HEKdh-0006f0-DC for emacs-devel@gnu.org; Tue, 06 Feb 2007 02:21:18 -0500 Original-Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1HEKdh-0006ex-6m for emacs-devel@gnu.org; Tue, 06 Feb 2007 02:21:17 -0500 Original-Received: from pc3.berlin.powerweb.de ([62.67.228.11]) by monty-python.gnu.org with esmtp (Exim 4.52) id 1HEKdg-0004an-1e for emacs-devel@gnu.org; Tue, 06 Feb 2007 02:21:16 -0500 Original-Received: from quinscape.de (pd95b0fdb.dip0.t-ipconnect.de [217.91.15.219]) by pc3.berlin.powerweb.de (8.9.3p3/8.9.3) with ESMTP id IAA01041 for ; Tue, 6 Feb 2007 08:21:06 +0100 X-Delivered-To: Original-Received: (qmail 1014 invoked from network); 6 Feb 2007 07:21:10 -0000 Original-Received: from unknown (HELO lola.quinscape.zz) ([10.0.3.43]) (envelope-sender ) by ns.quinscape.de (qmail-ldap-1.03) with SMTP for ; 6 Feb 2007 07:21:10 -0000 Original-Received: by lola.quinscape.zz (Postfix, from userid 1001) id D41DAC2B97; Tue, 6 Feb 2007 08:20:56 +0100 (CET) In-Reply-To: (Richard Stallman's message of "Mon\, 05 Feb 2007 19\:16\:37 -0500") User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.0.50 (gnu/linux) X-detected-kernel: Linux 2.4-2.6 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:65990 Archived-At: Richard Stallman writes: > In contrast, if someone sends me a JPEG image in an email, Gnus > will happily show it to me without asking (at least with the > settings I'm using). So where's the protection in that case? > > Should we consider that a bug in Gnus? > (I don't know what the answer is.) I don't think so. That is pretty much standard behavior of all browsers/mail readers, and they are more likely to get an attack targeted for a hole in the image library. The expected way of dealing with a vulnerability is wait for the patch, possibly switching images off or restricting the sites you visit, until it arrives. People never upgrading their software and sitting on a net connection should consider switching off image support. -- David Kastrup