From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Stephen Leake Newsgroups: gmane.emacs.devel Subject: Re: ELPA policy Date: Thu, 12 Nov 2015 00:49:54 -0600 Message-ID: <86oaezemp9.fsf@stephe-leake.org> References: <87ziyuaqhl.fsf@petton.fr>> > <868u65afvh.fsf@stephe-leake.org> > <87lha5snji.fsf@isaac.fritz.box> > <87d1vhsmuj.fsf@isaac.fritz.box> > <878u65slue.fsf@isaac.fritz.box> > <874mgtsjwn.fsf@isaac.fritz.box> > <867flp8nb7.fsf@stephe-leake.org> <9e33129a-07d0-4abe-a94e-32d6d881519b@default> > <86bnb06g7g.fsf@stephe-leake.org>> > NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1447311042 23687 80.91.229.3 (12 Nov 2015 06:50:42 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Thu, 12 Nov 2015 06:50:42 +0000 (UTC) Cc: John Wiegley , drew.adams@oracle.com, emacs-devel@gnu.org To: Richard Stallman Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Thu Nov 12 07:50:30 2015 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1ZwliE-0003eq-5M for ged-emacs-devel@m.gmane.org; Thu, 12 Nov 2015 07:50:27 +0100 Original-Received: from localhost ([::1]:44846 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZwliD-0001Ck-BH for ged-emacs-devel@m.gmane.org; Thu, 12 Nov 2015 01:50:25 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:57779) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Zwlhz-0001CU-6Z for emacs-devel@gnu.org; Thu, 12 Nov 2015 01:50:12 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Zwlhu-00063s-5u for emacs-devel@gnu.org; Thu, 12 Nov 2015 01:50:11 -0500 Original-Received: from gproxy9-pub.mail.unifiedlayer.com ([69.89.20.122]:37927) by eggs.gnu.org with smtp (Exim 4.71) (envelope-from ) id 1Zwlht-00062S-VA for emacs-devel@gnu.org; Thu, 12 Nov 2015 01:50:06 -0500 Original-Received: (qmail 11020 invoked by uid 0); 12 Nov 2015 06:50:03 -0000 Original-Received: from unknown (HELO cmgw2) (10.0.90.83) by gproxy9.mail.unifiedlayer.com with SMTP; 12 Nov 2015 06:50:02 -0000 Original-Received: from host114.hostmonster.com ([74.220.207.114]) by cmgw2 with id gWpw1r0032UdiVW01Wpz1r; Wed, 11 Nov 2015 23:50:01 -0700 X-Authority-Analysis: v=2.1 cv=Jv9i8qIC c=1 sm=1 tr=0 a=CQdxDb2CKd3SRg4I0/XZPQ==:117 a=CQdxDb2CKd3SRg4I0/XZPQ==:17 a=DsvgjBjRAAAA:8 a=f5113yIGAAAA:8 a=9i_RQKNPAAAA:8 a=hEr_IkYJT6EA:10 a=x_XPkuGwIRMA:10 a=qtqOOiqGOCEA:10 a=mDV3o1hIAAAA:8 a=SbqdOsChZpqBhZ1XPZcA:9 Original-Received: from [76.218.37.33] (port=49821 helo=TAKVER2) by host114.hostmonster.com with esmtpa (Exim 4.84) (envelope-from ) id 1Zwlhl-00020O-Ka; Wed, 11 Nov 2015 23:49:57 -0700 In-Reply-To: (Richard Stallman's message of "Wed, 11 Nov 2015 18:27:49 -0500") User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (windows-nt) X-Identified-User: {2442:host114.hostmonster.com:stephele:stephe-leake.org} {sentby:smtp auth 76.218.37.33 authed with stephen_leake@stephe-leake.org} X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x X-Received-From: 69.89.20.122 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:194194 Archived-At: Richard Stallman writes: > [[[ To any NSA and FBI agents reading my email: please consider ]]] > [[[ whether defending the US Constitution against all enemies, ]]] > [[[ foreign or domestic, requires you to follow Snowden's example. ]]] > > > Since pulling in data from the Web indiscriminately is not > > possible for this project (we have to make sure we're not > > unwittingly including code without a proper copyright assignment), > > perhaps we need as an "integrator": someone willing to guide the > > update of ELPA from various sources on the Web, keeping an eye out > > for changes that might affect copyright. > > What we need to solve Drew's problem is to merge changes into a few > specific files from a specific place, and commit them using git. > Isn't that easy enough to do? > > There could be one page where he provides the commit log info. > Whenever that page changes (we could check every 5 minutes), our demon > could merge in all the files which have changed. They it would email > the diffs to Drew so he could confirm what he installed. > > Thus, when Drew wants to install a new version, he would change the > other pages first, then write the change log text into the log page. > Then wait 5 minutes and it's done. > > This is assuming there are no other obstacles aside from the > mechanics of installing changes into our repository. Any malicious hacker can drop completely different code in that web page, and thus get it into Gnu ELPA. We will have replaced the security of private machines with whatever web login that web page requires; that's a huge step backwards. -- -- Stephe