From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Tim Cross Newsgroups: gmane.emacs.devel Subject: Re: gmail+imap+smtp (oauth2) Date: Fri, 06 May 2022 22:49:15 +1000 Message-ID: <87a6bues6q.fsf@gmail.com> References: <87k0b2tkg1.fsf@mat.ucm.es> <87zgjx4qhs.fsf@gmail.com> <87bkwcgmr3.fsf@mat.ucm.es> <87levfzqj2.fsf@yale.edu> <871qx7scvi.fsf@gmail.com> <87v8ujqec5.fsf@logand.com> <87ee172fjz.fsf@gmail.com> Mime-Version: 1.0 Content-Type: text/plain Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="23722"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: mu4e 1.7.13; emacs 28.1.50 Cc: emacs-devel@gnu.org To: tomas@tuxteam.de Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Fri May 06 14:56:47 2022 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nmxVm-0005y6-RK for ged-emacs-devel@m.gmane-mx.org; Fri, 06 May 2022 14:56:46 +0200 Original-Received: from localhost ([::1]:60326 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1nmxVj-0008EZ-UX for ged-emacs-devel@m.gmane-mx.org; Fri, 06 May 2022 08:56:44 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:50648) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nmxUr-0007T1-Fd for emacs-devel@gnu.org; Fri, 06 May 2022 08:55:49 -0400 Original-Received: from mail-pj1-x1032.google.com ([2607:f8b0:4864:20::1032]:38735) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1nmxUp-0004N2-Nv for emacs-devel@gnu.org; Fri, 06 May 2022 08:55:49 -0400 Original-Received: by mail-pj1-x1032.google.com with SMTP id cx11-20020a17090afd8b00b001d9fe5965b3so10747467pjb.3 for ; Fri, 06 May 2022 05:55:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=references:user-agent:from:to:cc:subject:date:in-reply-to :message-id:mime-version; bh=pogEhUXZMjxF02Fp5zphendS/VrxK7PySmAXxPwo79Q=; b=YUj+OHWm5/XE+TrjA6q1lfr13kyRv5nZP3CLPmwqYBO/2wHVrnL6a9rdx1c4qOYc4l rUlXfJeqyGaNaJ60mbsmVO92WnZ7P6dSZv2d1QsTVWIf19k4rxCsiFbh1EYSEsePOwlR 7wvApJQBh4ioM5bk9wo9GVbR4wnygZ7KVusi3/jPw/hXled/cDOsuLJIzfSmTSPJPhQV P7KvbfTJ6Qpp6Ya/Sdqolcypg2SIVNHwW2EaGyyB3gQmaYRYJ/Huii1IjlV8RD/HtkKc gAnINnh7DqqAdjFoASPgakH/5ApLVl/4wN8mX172Is/Ut9iG7/lzT0df4vkYpfmQzclt jahA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:references:user-agent:from:to:cc:subject:date :in-reply-to:message-id:mime-version; bh=pogEhUXZMjxF02Fp5zphendS/VrxK7PySmAXxPwo79Q=; b=7Fz3kaxDq7eMW1roW+pk/rAP97H6sRJmEFAcrPZiw+rw4ArlgPuSvQ2OYRMfES8lUB WGUL/6p9olVLB4U948+hRmis69Yyudftzs2DJVqPhqriK5xixwmHs0k26TcdS1OLcHC9 r9aXX+8XlyQEetr4YlHO5RLu572Hb5DexUUuUaILeRCyYareKlJnDyuNrgF7gMdzf+Ux amHYIXaQP/MmIxkJmxYmSWv7Gf7yHDJQSlQKZPKl9UBlvtMoKsrKNSfn1Tv65tPMg9la l7ufaPE4TwRaIatnka0jjRGkFFX8e5HjqE4y7EpB3z5eirf/vwil9eb8kp97ziGt/zpj T1yg== X-Gm-Message-State: AOAM531+NMwMfKbSCginW2mPVvIDQ8V6oIMSJB5xVMLujynkTAznZEWS rYfA7pJbPW0SeEaqIqyuE6iU3GOCVNA= X-Google-Smtp-Source: ABdhPJw26ZdY3Kd1Lr5iUKRXI9aQo3k7qe9weeH9nXaO8Rmqk+cupcv6vUIJZsFcNJ4iSY0a1dtL0Q== X-Received: by 2002:a17:90b:388f:b0:1dc:6e0f:372b with SMTP id mu15-20020a17090b388f00b001dc6e0f372bmr3904151pjb.93.1651841745713; Fri, 06 May 2022 05:55:45 -0700 (PDT) Original-Received: from dingbat (220-235-29-41.dyn.iinet.net.au. [220.235.29.41]) by smtp.gmail.com with ESMTPSA id il5-20020a17090b164500b001d9253a32fcsm3616157pjb.36.2022.05.06.05.55.43 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 06 May 2022 05:55:45 -0700 (PDT) In-reply-to: Received-SPF: pass client-ip=2607:f8b0:4864:20::1032; envelope-from=theophilusx@gmail.com; helo=mail-pj1-x1032.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.io gmane.emacs.devel:289319 Archived-At: writes: > [[PGP Signed Part:Undecided]] > On Fri, May 06, 2022 at 07:38:12AM -0400, Stefan Monnier wrote: >> > Problem is, Google T&C require that the application ID is kept secret. >> > For open source, this is a problem because we cannot add the applicaiton >> > ID and keep it secret while making the code open source. >> >> FWIW, it's also a problem for proprietary applications since the secret >> will necessarily be somewhere inside the executable as well. It's a bit >> harder to find, and can be obfuscated to some extent, but as long as you >> can run the code inside a debugger and you have enough time on your >> hands to reverse engineer the workings of that part of the code you can >> also extract the application ID. > > We know. They know. We know they know. They know we know they know. > We've been down this drm-keys-embedded-in-application tango so many > times already- > > Now someone explain to me: why do they nevertheless do it? > > Is it for having some T&C where they basically say "we'll > kick you out whenever we think we want to"? > > I'm hard-pressed to come up with a friendlier interpretation. > Problem is, your looking for a rational reason. The reality is T&C are typically written by non-technical people (often lawyers) who don't really understand (Or care to understand) the finer points and implications. They work in broad brushstrokes and plan to adjust/change if there is enough stink. HOwever, in this case, the percentage of voerall users impacted is unlikely to even register a a blip o thier radar. Bootm line, we are being done in by bureaucracy and bad communication.