From: "Stephen J. Turnbull" <stephen@xemacs.org>
To: Lennart Borgman <lennart.borgman@gmail.com>
Cc: rms@gnu.org, emacs-devel@gnu.org
Subject: Re: Autoload from a web page?
Date: Tue, 29 Dec 2009 10:32:38 +0900 [thread overview]
Message-ID: <873a2upnt5.fsf@uwakimon.sk.tsukuba.ac.jp> (raw)
In-Reply-To: <e01d8a50912281055w2801b736te6d05dc2733ae83a@mail.gmail.com>
Lennart Borgman writes:
> In a situation like that it is possible to set up for autoloading
> things by downloading them from the web without compromising security
> (or at least not more than when you download a file yourself) since
> you know which files will be downloaded.
Why would the user know which files would be downloaded, and from
where? The whole point is to do it automatically, without troubling
the user. If the user is going to go to the trouble of *carefully*
verifying sources and so on, little is saved. On the other hand, it
would be easy enough to register a domain like "savannah.gnu.org.to",
and a lot of folks might miss that, if they even looked at all.
Think of this like rules against talking on your cellphone while
driving. Cellphone use is not an absolute guarantee you'll kill
somebody, and abstinence from cellphone use is no guarantee you
won't. Some people do use cellphones responsibly while driving, and
so on. But for the typical driver it does vastly increase the risks.
And so does any automated downloading and execution scheme.
next prev parent reply other threads:[~2009-12-29 1:32 UTC|newest]
Thread overview: 129+ messages / expand[flat|nested] mbox.gz Atom feed top
2009-12-26 2:55 Autoload from a web page? Lennart Borgman
2009-12-27 3:13 ` Richard Stallman
2009-12-27 3:24 ` Lennart Borgman
2009-12-28 18:48 ` Richard Stallman
2009-12-28 18:55 ` Lennart Borgman
2009-12-29 1:32 ` Stephen J. Turnbull [this message]
2009-12-29 1:39 ` Lennart Borgman
2009-12-29 2:45 ` joakim
2009-12-29 2:54 ` Lennart Borgman
2009-12-29 4:52 ` Tom Tromey
2009-12-29 22:25 ` Lennart Borgman
2009-12-30 6:13 ` Richard Stallman
2009-12-30 18:06 ` Jonas Bernoulli
2009-12-30 18:30 ` Stefan Monnier
2009-12-30 19:10 ` Jonas Bernoulli
2010-01-01 0:40 ` Phil Hagelberg
2010-01-01 19:27 ` Tom Tromey
2010-01-01 19:26 ` Tom Tromey
2010-01-04 18:12 ` Ted Zlatanov
2009-12-29 15:11 ` Ted Zlatanov
2009-12-29 18:46 ` Richard Stallman
2009-12-29 21:14 ` unsupported packages area in the Emacs repo (was: Autoload from a web page?) Ted Zlatanov
2009-12-29 21:21 ` Deniz Dogan
2009-12-29 21:38 ` unsupported packages area in the Emacs repo Ted Zlatanov
2009-12-29 21:36 ` Tom Tromey
2009-12-30 16:15 ` Ted Zlatanov
2009-12-31 5:32 ` Phil Hagelberg
2010-01-01 19:18 ` Tom Tromey
2010-01-03 5:38 ` Integrating package.el (was Re: unsupported packages area in the Emacs repo) Phil Hagelberg
2010-01-04 17:55 ` Integrating package.el Ted Zlatanov
2010-01-04 19:51 ` Tom Tromey
2010-01-05 5:02 ` Phil Hagelberg
2010-01-05 5:37 ` Lennart Borgman
2010-01-05 15:06 ` Stefan Monnier
2010-01-05 16:03 ` Ted Zlatanov
2010-01-05 16:47 ` Stefan Monnier
2010-01-05 20:18 ` Ted Zlatanov
2010-01-05 23:50 ` Jonas Bernoulli
2010-01-06 20:45 ` Richard Stallman
2010-01-06 21:49 ` Ted Zlatanov
2010-01-09 5:40 ` Phil Hagelberg
2010-01-09 14:32 ` Richard Stallman
2010-01-09 17:47 ` Phil Hagelberg
2010-01-10 10:41 ` Richard Stallman
2010-01-10 11:33 ` Stephen J. Turnbull
2010-01-10 14:04 ` Chong Yidong
2010-01-10 16:00 ` joakim
2010-01-10 20:43 ` Phil Hagelberg
2010-01-10 20:07 ` Phil Hagelberg
2010-01-10 21:24 ` Stefan Monnier
2010-01-10 23:02 ` Phil Hagelberg
2010-01-11 3:28 ` Stefan Monnier
2010-01-14 3:12 ` Phil Hagelberg
2010-01-19 11:40 ` Phil Hagelberg
2010-01-19 17:17 ` Dan Nicolaescu
2010-02-22 19:22 ` Ted Zlatanov
2010-02-22 20:36 ` joakim
2010-02-23 22:25 ` Stefan Monnier
2010-02-24 21:20 ` Ted Zlatanov
2010-02-25 20:05 ` Stefan Monnier
2010-03-01 14:59 ` Ted Zlatanov
2010-03-01 16:32 ` Jonas Bernoulli
2010-03-01 17:14 ` Ted Zlatanov
2010-03-01 20:59 ` Jonas Bernoulli
2010-03-02 17:39 ` Richard Stallman
2010-03-02 18:46 ` Ted Zlatanov
2010-03-01 21:19 ` Stefan Monnier
2010-03-02 13:34 ` Ted Zlatanov
2010-03-01 21:37 ` Jonas Bernoulli
2010-03-01 22:18 ` Štěpán Němec
2010-03-01 22:30 ` Štěpán Němec
2010-03-01 23:00 ` Jonas Bernoulli
2010-03-02 13:38 ` Ted Zlatanov
2010-03-03 20:13 ` Tom Tromey
2010-03-04 5:42 ` Phil Hagelberg
2010-03-02 19:03 ` Davis Herring
2010-02-25 22:56 ` David De La Harpe Golden
2010-03-04 5:39 ` Phil Hagelberg
2010-03-04 7:29 ` Stephen J. Turnbull
2010-03-04 18:27 ` Stefan Monnier
2010-03-05 4:41 ` Stephen J. Turnbull
2010-03-04 13:54 ` Ted Zlatanov
2010-03-04 18:29 ` Stefan Monnier
2010-03-04 18:33 ` Tom Tromey
2010-03-07 22:58 ` Phil Hagelberg
2010-03-04 20:39 ` Ted Zlatanov
2010-03-07 23:16 ` Phil Hagelberg
2010-03-08 3:17 ` Tom Tromey
2010-03-08 14:55 ` Ted Zlatanov
2010-03-08 17:01 ` Stefan Monnier
2010-03-08 17:53 ` Ted Zlatanov
2010-03-04 18:30 ` Tom Tromey
2010-03-05 0:22 ` Stefan Monnier
2010-03-01 14:43 ` Ted Zlatanov
2010-03-01 16:26 ` Jonas Bernoulli
2010-03-01 17:28 ` Ted Zlatanov
2010-03-01 18:06 ` Tom Tromey
2010-03-01 21:22 ` Jonas Bernoulli
2010-03-03 20:15 ` Tom Tromey
2010-03-03 20:22 ` Ted Zlatanov
2010-03-03 22:21 ` Tom Tromey
2010-03-02 13:31 ` Ted Zlatanov
2010-03-01 21:09 ` Jonas Bernoulli
2010-01-11 3:09 ` Stephen J. Turnbull
2010-01-12 20:06 ` Ted Zlatanov
2010-01-12 21:37 ` Phil Hagelberg
2010-01-05 15:50 ` Ted Zlatanov
2010-01-05 16:42 ` Stefan Monnier
2010-01-05 17:51 ` Installation, activation and setup of packages (e.g. Gnus) (was: Integrating package.el) Ted Zlatanov
2010-01-05 19:43 ` Installation, activation and setup of packages (e.g. Gnus) Stefan Monnier
2010-01-05 22:28 ` Gnus encouragement of GMail (was: Installation, activation and setup of packages (e.g. Gnus)) Ted Zlatanov
2010-01-05 17:27 ` Installation, activation and setup of packages (e.g. Gnus) (was: Integrating package.el) Reiner Steib
2010-01-05 18:03 ` Integrating package.el Phil Hagelberg
2010-01-05 18:40 ` Ted Zlatanov
2010-01-05 19:14 ` Tom Tromey
2010-01-05 20:04 ` Ted Zlatanov
2010-01-05 23:19 ` Tom Tromey
2010-01-06 15:42 ` Ted Zlatanov
2009-12-30 17:16 ` unsupported packages area in the Emacs repo Jonas Bernoulli
2010-01-01 19:21 ` Tom Tromey
2009-12-29 5:22 ` Autoload from a web page? Richard Stallman
2009-12-29 5:29 ` Lennart Borgman
2010-01-02 15:45 ` Richard Stallman
2010-01-04 2:26 ` Lennart Borgman
2010-01-04 16:23 ` Richard Stallman
2009-12-29 17:05 ` Stefan Monnier
2009-12-30 16:30 ` Ted Zlatanov
2009-12-30 16:58 ` Stefan Monnier
2009-12-30 17:08 ` Lennart Borgman
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
List information: https://www.gnu.org/software/emacs/
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=873a2upnt5.fsf@uwakimon.sk.tsukuba.ac.jp \
--to=stephen@xemacs.org \
--cc=emacs-devel@gnu.org \
--cc=lennart.borgman@gmail.com \
--cc=rms@gnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this public inbox
https://git.savannah.gnu.org/cgit/emacs.git
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).