From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: "Stephen J. Turnbull" Newsgroups: gmane.emacs.devel Subject: Re: ELPA security Date: Mon, 07 Jan 2013 15:57:16 +0900 Message-ID: <878v85bhv7.fsf@uwakimon.sk.tsukuba.ac.jp> References: <8738zf70ep.fsf@riseup.net> <871uejlbm1.fsf@lifelogs.com> <87k3rrr31g.fsf@Rainer.invalid> <874nium8h0.fsf@lifelogs.com> <87bod1h7d3.fsf@gmail.com> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 X-Trace: ger.gmane.org 1357541846 9593 80.91.229.3 (7 Jan 2013 06:57:26 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Mon, 7 Jan 2013 06:57:26 +0000 (UTC) Cc: emacs-devel@gnu.org To: Jambunathan K Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Mon Jan 07 07:57:43 2013 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1Ts6eV-0004rc-AG for ged-emacs-devel@m.gmane.org; Mon, 07 Jan 2013 07:57:43 +0100 Original-Received: from localhost ([::1]:53136 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Ts6eF-00043c-OV for ged-emacs-devel@m.gmane.org; Mon, 07 Jan 2013 01:57:27 -0500 Original-Received: from eggs.gnu.org ([208.118.235.92]:59130) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Ts6eC-00043L-V4 for emacs-devel@gnu.org; Mon, 07 Jan 2013 01:57:25 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Ts6eC-0005O9-00 for emacs-devel@gnu.org; Mon, 07 Jan 2013 01:57:24 -0500 Original-Received: from mgmt2.sk.tsukuba.ac.jp ([130.158.97.224]:57932) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Ts6eB-0005Ng-NQ for emacs-devel@gnu.org; Mon, 07 Jan 2013 01:57:23 -0500 Original-Received: from uwakimon.sk.tsukuba.ac.jp (uwakimon.sk.tsukuba.ac.jp [130.158.99.156]) by mgmt2.sk.tsukuba.ac.jp (Postfix) with ESMTP id 5E69C9708F9; Mon, 7 Jan 2013 15:57:16 +0900 (JST) Original-Received: by uwakimon.sk.tsukuba.ac.jp (Postfix, from userid 1000) id 292C21A30DD; Mon, 7 Jan 2013 15:57:16 +0900 (JST) In-Reply-To: <87bod1h7d3.fsf@gmail.com> X-Mailer: VM undefined under 21.5 (beta32) "habanero" b0d40183ac79 XEmacs Lucid (x86_64-unknown-linux) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 130.158.97.224 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:156109 Archived-At: Jambunathan K writes: > Can I not rely on the distributor to do the due diligence? No, due diligence does not exist in GNU software because in the FSF's use of the GPL there is no contract and all warranties are disclaimed. You may, in some jurisdictions, be able to sue them anyway, but lack of due diligence is not going to be grounds. IANAL-ly y'rs,