From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: "Juanma Barranquero" Newsgroups: gmane.emacs.devel Subject: Re: Image mode Date: Tue, 6 Feb 2007 10:43:39 +0100 Message-ID: References: <87k5yxeg19.fsf@jurta.org> <87d54ob8c5.fsf@stupidchicken.com> <87iregmafd.fsf@stupidchicken.com> <86irefojcc.fsf@lola.quinscape.zz> <86tzxzn0bx.fsf@lola.quinscape.zz> <86ps8nmy95.fsf@lola.quinscape.zz> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Trace: sea.gmane.org 1170755042 28218 80.91.229.12 (6 Feb 2007 09:44:02 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Tue, 6 Feb 2007 09:44:02 +0000 (UTC) Cc: Chong Yidong , emacs-devel@gnu.org To: "David Kastrup" Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Tue Feb 06 10:44:00 2007 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([199.232.76.165]) by lo.gmane.org with esmtp (Exim 4.50) id 1HEMro-0001P9-CB for ged-emacs-devel@m.gmane.org; Tue, 06 Feb 2007 10:44:00 +0100 Original-Received: from localhost ([127.0.0.1] helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1HEMrk-0008SR-Qf for ged-emacs-devel@m.gmane.org; Tue, 06 Feb 2007 04:43:56 -0500 Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1HEMrW-0008QI-P8 for emacs-devel@gnu.org; Tue, 06 Feb 2007 04:43:42 -0500 Original-Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1HEMrV-0008PK-6E for emacs-devel@gnu.org; Tue, 06 Feb 2007 04:43:42 -0500 Original-Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1HEMrU-0008PH-UU for emacs-devel@gnu.org; Tue, 06 Feb 2007 04:43:40 -0500 Original-Received: from an-out-0708.google.com ([209.85.132.243]) by monty-python.gnu.org with esmtp (Exim 4.52) id 1HEMrU-0007KT-IW for emacs-devel@gnu.org; Tue, 06 Feb 2007 04:43:40 -0500 Original-Received: by an-out-0708.google.com with SMTP id b8so1098176ana for ; Tue, 06 Feb 2007 01:43:40 -0800 (PST) DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=OAbz4jrxPsQPzltqXdaTM5yfGixgw3YDqpoehYDLWLFZi9wIuLcC5F8vjfSzll6Ns9awUdbaYeA90shcJUIacDxi8NGZsUoqIE18i3RzyzaduvtRjAivw8/8WE4Hol4l74k5y9DXw+4tLSFW/cZf3cWtObYKGav2BcEfjcXZylE= Original-Received: by 10.114.12.9 with SMTP id 9mr732791wal.1170755019618; Tue, 06 Feb 2007 01:43:39 -0800 (PST) Original-Received: by 10.114.234.16 with HTTP; Tue, 6 Feb 2007 01:43:39 -0800 (PST) In-Reply-To: <86ps8nmy95.fsf@lola.quinscape.zz> Content-Disposition: inline X-detected-kernel: Linux 2.6 (newer, 2) X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:65998 Archived-At: On 2/6/07, David Kastrup wrote: > If there ever was a "policy" instead of just an implementation, It was a policy by implementation :) > If the user _knows_ that Xlib is a current attack vector, she has the > option of using "emacs -nw". In a similar vein, if she knows about a > jpeg library vulnerability, she might refrain from opening "xxx.jpg" > in Emacs. For this discussion it doesn't make much sense IMO to talk about the vulnerabilities the user knows about. > As long as file type and extension are compatible, I see no reason for > user feedback before treating the file as an image. I'm not in favor of the warning, but I agree with Richard in that I don't see any reason to treat files with valid image extensions (in agreement or disagreement with its contents) different that images with no recognizable extension. The way for a virus to enter a system is profiting from the familiarity. Either you trust your images' source, or you don't. /L/e/k/t/u