From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Richard Stallman Newsgroups: gmane.emacs.devel Subject: Re: Emacs Lisp's future Date: Tue, 07 Oct 2014 20:48:28 -0400 Message-ID: References: <54193A70.9020901@member.fsf.org> <87lhp6h4zb.fsf@panthera.terpri.org> <87k34qo4c1.fsf@fencepost.gnu.org> <54257C22.2000806@yandex.ru> <83iokato6x.fsf@gnu.org> <87wq8pwjen.fsf@uwakimon.sk.tsukuba.ac.jp> <837g0ptnlj.fsf@gnu.org> <87r3yxwdr6.fsf@uwakimon.sk.tsukuba.ac.jp> <87tx3tmi3t.fsf@fencepost.gnu.org> <834mvttgsf.fsf@gnu.org> <87lhp5m99w.fsf@fencepost.gnu.org> <87h9ztm5oa.fsf@fencepost.gnu.org> <87d2ahm3nw.fsf@fencepost.gnu.org> <871tqneyvl.fsf@netris.org> <87zjd9swfj.fsf@uwakimon.sk.tsukuba.ac.jp> Reply-To: rms@gnu.org NNTP-Posting-Host: plane.gmane.org Content-Type: text/plain; charset=ISO-8859-15 X-Trace: ger.gmane.org 1412729331 31797 80.91.229.3 (8 Oct 2014 00:48:51 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Wed, 8 Oct 2014 00:48:51 +0000 (UTC) Cc: dak@gnu.org, mhw@netris.org, dmantipov@yandex.ru, emacs-devel@gnu.org, handa@gnu.org, monnier@iro.umontreal.ca, eliz@gnu.org To: "Stephen J. Turnbull" Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Wed Oct 08 02:48:45 2014 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1XbfQq-0004Xb-Qx for ged-emacs-devel@m.gmane.org; Wed, 08 Oct 2014 02:48:44 +0200 Original-Received: from localhost ([::1]:33150 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XbfQq-0001aF-HN for ged-emacs-devel@m.gmane.org; Tue, 07 Oct 2014 20:48:44 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:59858) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XbfQc-0001a9-TG for emacs-devel@gnu.org; Tue, 07 Oct 2014 20:48:31 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1XbfQb-0000Y8-QA for emacs-devel@gnu.org; Tue, 07 Oct 2014 20:48:30 -0400 Original-Received: from fencepost.gnu.org ([2001:4830:134:3::e]:56313) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XbfQb-0000Y4-Mi for emacs-devel@gnu.org; Tue, 07 Oct 2014 20:48:29 -0400 Original-Received: from rms by fencepost.gnu.org with local (Exim 4.71) (envelope-from ) id 1XbfQa-0000UU-6N; Tue, 07 Oct 2014 20:48:28 -0400 In-reply-to: <87zjd9swfj.fsf@uwakimon.sk.tsukuba.ac.jp> (stephen@xemacs.org) X-detected-operating-system: by eggs.gnu.org: Error: Malformed IPv6 address (bad octet value). X-Received-From: 2001:4830:134:3::e X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:175104 Archived-At: [[[ To any NSA and FBI agents reading my email: please consider ]]] [[[ whether defending the US Constitution against all enemies, ]]] [[[ foreign or domestic, requires you to follow Snowden's example. ]]] > Given a self-contained Scheme program, it should be easy to determine > whether it ever examines or sets string text properties. Is that enough > to provide the same "security" benefits in practice? No. Often systems are constructed by assembling separately developed modules. If a "security" module responsible for checking data validity is property-oblivious, then maliciously crafted properties may be able to cause "evil" behavior in a property-sensitive module supposedly protected by the "security" module. I don't understand what sort of danger you're worried about. Can you present a concrete scenario? You can impugn the skills of the programmers responsible, That comes from you, not from me. or say it's all very hypothetical It is all very abstract as well as hypothetical. If you want to convince me that this is a problem, you need to present sufficient arguments to outweigh the very clear problem that would be caused by NOT adding property lists to strings. You need to convice me that it makes sense to try to prevent communication between two Scheme programs in the same process. -- Dr Richard Stallman President, Free Software Foundation 51 Franklin St Boston MA 02110 USA www.fsf.org www.gnu.org Skype: No way! That's nonfree (freedom-denying) software. Use Ekiga or an ordinary phone call.