From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Richard Stallman Newsgroups: gmane.emacs.devel Subject: Re: security of the emacs package system, elpa, melpa and marmalade Date: Sat, 28 Sep 2013 10:15:51 -0400 Message-ID: References: <523FEE1B.9020408@binary-island.eu> <52429ABD.6090603@binary-island.eu> <52432BE9.1070402@binary-island.eu> <5243F836.9020301@binary-island.eu> <5245938E.6040906@binary-island.eu> Reply-To: rms@gnu.org NNTP-Posting-Host: plane.gmane.org Content-Type: text/plain; charset=ISO-8859-15 X-Trace: ger.gmane.org 1380377755 20509 80.91.229.3 (28 Sep 2013 14:15:55 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Sat, 28 Sep 2013 14:15:55 +0000 (UTC) Cc: ml_emacs-lists@binary-island.eu, emacs-devel@gnu.org To: Stefan Monnier Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Sat Sep 28 16:15:59 2013 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1VPvJO-0001Vt-DZ for ged-emacs-devel@m.gmane.org; Sat, 28 Sep 2013 16:15:58 +0200 Original-Received: from localhost ([::1]:41431 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VPvJN-0005XC-VQ for ged-emacs-devel@m.gmane.org; Sat, 28 Sep 2013 10:15:57 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:58157) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VPvJJ-0005X4-UP for emacs-devel@gnu.org; Sat, 28 Sep 2013 10:15:54 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1VPvJJ-0008U5-6d for emacs-devel@gnu.org; Sat, 28 Sep 2013 10:15:53 -0400 Original-Received: from fencepost.gnu.org ([2001:4830:134:3::e]:35899) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VPvJJ-0008U1-38 for emacs-devel@gnu.org; Sat, 28 Sep 2013 10:15:53 -0400 Original-Received: from rms by fencepost.gnu.org with local (Exim 4.71) (envelope-from ) id 1VPvJH-000661-Ls; Sat, 28 Sep 2013 10:15:51 -0400 In-reply-to: (message from Stefan Monnier on Fri, 27 Sep 2013 11:47:49 -0400) X-detected-operating-system: by eggs.gnu.org: Error: Malformed IPv6 address (bad octet value). X-Received-From: 2001:4830:134:3::e X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:163703 Archived-At: [ To any NSA and FBI agents reading my email: please consider [ whether defending the US Constitution against all enemies, [ foreign or domestic, requires you to follow Snowden's example. I think that we should warn users that it is risky to use packages from archives that don't supervise the code that gets put in them, or that don't use signing. -- Dr Richard Stallman President, Free Software Foundation 51 Franklin St Boston MA 02110 USA www.fsf.org www.gnu.org Skype: No way! That's nonfree (freedom-denying) software. Use Ekiga or an ordinary phone call.