From: joakim@verona.se
To: Lennart Borgman <lennart.borgman@gmail.com>
Cc: Tom Tromey <tromey@redhat.com>, rms@gnu.org, emacs-devel@gnu.org
Subject: Re: Autoload from a web page?
Date: Tue, 29 Dec 2009 03:45:38 +0100 [thread overview]
Message-ID: <m3ljgm5wh9.fsf@verona.se> (raw)
In-Reply-To: <e01d8a50912281055w2801b736te6d05dc2733ae83a@mail.gmail.com> (Lennart Borgman's message of "Mon, 28 Dec 2009 19:55:43 +0100")
Lennart Borgman <lennart.borgman@gmail.com> writes:
> On Mon, Dec 28, 2009 at 7:48 PM, Richard Stallman <rms@gnu.org> wrote:
>> But the risk is about doing this in an uncontrolled way. A lot of sw
>> is updated in a similar way today (in a way that tries to control the
>> risks).
>>
>> Just because it is common does not make it acceptable.
>>
>> We do not want software to be autoloaded from anywhere outside
>> the user's machine. The user should always have control over
>> installing it in the machine.
>>
>> (See http://www.gnu.org/philosophy/javascript-trap.html> for a similar issue.)
>
>
> That is a totally different context than the one I am targetting.
>
>
> My scenario is this:
>
> - You have group of related elisp files in a common place on the web.
> - You download one of them, but it turns out that it does `require' or
> autoload that supposes you have downloaded the other files too.
Is this situation not handled well enough by Tom Tromeys package.el and
ELPA? Especially if we move ahead with the plan to have ELPA:s backend
be something like Savannah.
>
> In a situation like that it is possible to set up for autoloading
> things by downloading them from the web without compromising security
> (or at least not more than when you download a file yourself) since
> you know which files will be downloaded.
>
>
> Note: Of course this first assumes that you download one or two files
> with the necessary information.
>
>
--
Joakim Verona
next prev parent reply other threads:[~2009-12-29 2:45 UTC|newest]
Thread overview: 129+ messages / expand[flat|nested] mbox.gz Atom feed top
2009-12-26 2:55 Autoload from a web page? Lennart Borgman
2009-12-27 3:13 ` Richard Stallman
2009-12-27 3:24 ` Lennart Borgman
2009-12-28 18:48 ` Richard Stallman
2009-12-28 18:55 ` Lennart Borgman
2009-12-29 1:32 ` Stephen J. Turnbull
2009-12-29 1:39 ` Lennart Borgman
2009-12-29 2:45 ` joakim [this message]
2009-12-29 2:54 ` Lennart Borgman
2009-12-29 4:52 ` Tom Tromey
2009-12-29 22:25 ` Lennart Borgman
2009-12-30 6:13 ` Richard Stallman
2009-12-30 18:06 ` Jonas Bernoulli
2009-12-30 18:30 ` Stefan Monnier
2009-12-30 19:10 ` Jonas Bernoulli
2010-01-01 0:40 ` Phil Hagelberg
2010-01-01 19:27 ` Tom Tromey
2010-01-01 19:26 ` Tom Tromey
2010-01-04 18:12 ` Ted Zlatanov
2009-12-29 15:11 ` Ted Zlatanov
2009-12-29 18:46 ` Richard Stallman
2009-12-29 21:14 ` unsupported packages area in the Emacs repo (was: Autoload from a web page?) Ted Zlatanov
2009-12-29 21:21 ` Deniz Dogan
2009-12-29 21:38 ` unsupported packages area in the Emacs repo Ted Zlatanov
2009-12-29 21:36 ` Tom Tromey
2009-12-30 16:15 ` Ted Zlatanov
2009-12-31 5:32 ` Phil Hagelberg
2010-01-01 19:18 ` Tom Tromey
2010-01-03 5:38 ` Integrating package.el (was Re: unsupported packages area in the Emacs repo) Phil Hagelberg
2010-01-04 17:55 ` Integrating package.el Ted Zlatanov
2010-01-04 19:51 ` Tom Tromey
2010-01-05 5:02 ` Phil Hagelberg
2010-01-05 5:37 ` Lennart Borgman
2010-01-05 15:06 ` Stefan Monnier
2010-01-05 16:03 ` Ted Zlatanov
2010-01-05 16:47 ` Stefan Monnier
2010-01-05 20:18 ` Ted Zlatanov
2010-01-05 23:50 ` Jonas Bernoulli
2010-01-06 20:45 ` Richard Stallman
2010-01-06 21:49 ` Ted Zlatanov
2010-01-09 5:40 ` Phil Hagelberg
2010-01-09 14:32 ` Richard Stallman
2010-01-09 17:47 ` Phil Hagelberg
2010-01-10 10:41 ` Richard Stallman
2010-01-10 11:33 ` Stephen J. Turnbull
2010-01-10 14:04 ` Chong Yidong
2010-01-10 16:00 ` joakim
2010-01-10 20:43 ` Phil Hagelberg
2010-01-10 20:07 ` Phil Hagelberg
2010-01-10 21:24 ` Stefan Monnier
2010-01-10 23:02 ` Phil Hagelberg
2010-01-11 3:28 ` Stefan Monnier
2010-01-14 3:12 ` Phil Hagelberg
2010-01-19 11:40 ` Phil Hagelberg
2010-01-19 17:17 ` Dan Nicolaescu
2010-02-22 19:22 ` Ted Zlatanov
2010-02-22 20:36 ` joakim
2010-02-23 22:25 ` Stefan Monnier
2010-02-24 21:20 ` Ted Zlatanov
2010-02-25 20:05 ` Stefan Monnier
2010-03-01 14:59 ` Ted Zlatanov
2010-03-01 16:32 ` Jonas Bernoulli
2010-03-01 17:14 ` Ted Zlatanov
2010-03-01 20:59 ` Jonas Bernoulli
2010-03-02 17:39 ` Richard Stallman
2010-03-02 18:46 ` Ted Zlatanov
2010-03-01 21:19 ` Stefan Monnier
2010-03-02 13:34 ` Ted Zlatanov
2010-03-01 21:37 ` Jonas Bernoulli
2010-03-01 22:18 ` Štěpán Němec
2010-03-01 22:30 ` Štěpán Němec
2010-03-01 23:00 ` Jonas Bernoulli
2010-03-02 13:38 ` Ted Zlatanov
2010-03-03 20:13 ` Tom Tromey
2010-03-04 5:42 ` Phil Hagelberg
2010-03-02 19:03 ` Davis Herring
2010-02-25 22:56 ` David De La Harpe Golden
2010-03-04 5:39 ` Phil Hagelberg
2010-03-04 7:29 ` Stephen J. Turnbull
2010-03-04 18:27 ` Stefan Monnier
2010-03-05 4:41 ` Stephen J. Turnbull
2010-03-04 13:54 ` Ted Zlatanov
2010-03-04 18:29 ` Stefan Monnier
2010-03-04 18:33 ` Tom Tromey
2010-03-07 22:58 ` Phil Hagelberg
2010-03-04 20:39 ` Ted Zlatanov
2010-03-07 23:16 ` Phil Hagelberg
2010-03-08 3:17 ` Tom Tromey
2010-03-08 14:55 ` Ted Zlatanov
2010-03-08 17:01 ` Stefan Monnier
2010-03-08 17:53 ` Ted Zlatanov
2010-03-04 18:30 ` Tom Tromey
2010-03-05 0:22 ` Stefan Monnier
2010-03-01 14:43 ` Ted Zlatanov
2010-03-01 16:26 ` Jonas Bernoulli
2010-03-01 17:28 ` Ted Zlatanov
2010-03-01 18:06 ` Tom Tromey
2010-03-01 21:22 ` Jonas Bernoulli
2010-03-03 20:15 ` Tom Tromey
2010-03-03 20:22 ` Ted Zlatanov
2010-03-03 22:21 ` Tom Tromey
2010-03-02 13:31 ` Ted Zlatanov
2010-03-01 21:09 ` Jonas Bernoulli
2010-01-11 3:09 ` Stephen J. Turnbull
2010-01-12 20:06 ` Ted Zlatanov
2010-01-12 21:37 ` Phil Hagelberg
2010-01-05 15:50 ` Ted Zlatanov
2010-01-05 16:42 ` Stefan Monnier
2010-01-05 17:51 ` Installation, activation and setup of packages (e.g. Gnus) (was: Integrating package.el) Ted Zlatanov
2010-01-05 19:43 ` Installation, activation and setup of packages (e.g. Gnus) Stefan Monnier
2010-01-05 22:28 ` Gnus encouragement of GMail (was: Installation, activation and setup of packages (e.g. Gnus)) Ted Zlatanov
2010-01-05 17:27 ` Installation, activation and setup of packages (e.g. Gnus) (was: Integrating package.el) Reiner Steib
2010-01-05 18:03 ` Integrating package.el Phil Hagelberg
2010-01-05 18:40 ` Ted Zlatanov
2010-01-05 19:14 ` Tom Tromey
2010-01-05 20:04 ` Ted Zlatanov
2010-01-05 23:19 ` Tom Tromey
2010-01-06 15:42 ` Ted Zlatanov
2009-12-30 17:16 ` unsupported packages area in the Emacs repo Jonas Bernoulli
2010-01-01 19:21 ` Tom Tromey
2009-12-29 5:22 ` Autoload from a web page? Richard Stallman
2009-12-29 5:29 ` Lennart Borgman
2010-01-02 15:45 ` Richard Stallman
2010-01-04 2:26 ` Lennart Borgman
2010-01-04 16:23 ` Richard Stallman
2009-12-29 17:05 ` Stefan Monnier
2009-12-30 16:30 ` Ted Zlatanov
2009-12-30 16:58 ` Stefan Monnier
2009-12-30 17:08 ` Lennart Borgman
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
List information: https://www.gnu.org/software/emacs/
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=m3ljgm5wh9.fsf@verona.se \
--to=joakim@verona.se \
--cc=emacs-devel@gnu.org \
--cc=lennart.borgman@gmail.com \
--cc=rms@gnu.org \
--cc=tromey@redhat.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this public inbox
https://git.savannah.gnu.org/cgit/emacs.git
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).