From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: =?UTF-8?B?QW5kcmVhcyBSw7ZobGVy?= Newsgroups: gmane.emacs.devel Subject: Re: security of the emacs package system, elpa, melpa and marmalade Date: Thu, 26 Sep 2013 11:31:33 +0200 Message-ID: <5243FEF5.6050009@online.de> References: <523FEE1B.9020408@binary-island.eu> <52429ABD.6090603@binary-island.eu> <52432BE9.1070402@binary-island.eu> <87d2nw1j3b.fsf@uwakimon.sk.tsukuba.ac.jp> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Trace: ger.gmane.org 1380187783 1620 80.91.229.3 (26 Sep 2013 09:29:43 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Thu, 26 Sep 2013 09:29:43 +0000 (UTC) To: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Thu Sep 26 11:29:46 2013 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1VP7tJ-0007I0-DI for ged-emacs-devel@m.gmane.org; Thu, 26 Sep 2013 11:29:45 +0200 Original-Received: from localhost ([::1]:56978 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VP7tF-00067I-Pq for ged-emacs-devel@m.gmane.org; Thu, 26 Sep 2013 05:29:41 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:50691) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VP7t6-00066x-06 for emacs-devel@gnu.org; Thu, 26 Sep 2013 05:29:39 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1VP7sy-0005vc-MD for emacs-devel@gnu.org; Thu, 26 Sep 2013 05:29:31 -0400 Original-Received: from moutng.kundenserver.de ([212.227.126.171]:61204) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VP7sy-0005vL-Aa for emacs-devel@gnu.org; Thu, 26 Sep 2013 05:29:24 -0400 Original-Received: from purzel.sitgens (brln-4db9ef2e.pool.mediaWays.net [77.185.239.46]) by mrelayeu.kundenserver.de (node=mrbap2) with ESMTP (Nemesis) id 0MbsGc-1V80Au3g2w-00IxOb; Thu, 26 Sep 2013 11:29:23 +0200 User-Agent: Mozilla/5.0 (X11; Linux i686; rv:17.0) Gecko/20130801 Thunderbird/17.0.8 In-Reply-To: <87d2nw1j3b.fsf@uwakimon.sk.tsukuba.ac.jp> X-Provags-ID: V02:K0:nDX5cvp3EbTgYhGvvfC/UKBFboTdKFiq5uYho8rTdVH QGp3PuFqWSpvy5LAUX0fjZCuI6IXCo94PlSkYs4oL1FxmUMxMN VyaKr1xV+44FxxAgJWj4TC79nV0KSx2yVtV5zss4JReilfzK01 Xq9QIJ0I2yF4onnpPBAuVZ217ljLGBurz2g2Bs6ubE0l28IlmL y3qbt0cqFpfdU/iV6YfDGiHAsd4q0chscocKDq7jfsk9HFWOuy 6Qkn74IWYeDp5qYcD9cLpoT2QWXSTVOBvqKPxdWmTAnELZs8T0 I8DYRO490g1MjQN4X61ML0DAMw8Y/C57ZQWZtfC7ajSKH6Nsc8 tep412KcdTOTLZ9sOeDQ= X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.4.x-2.6.x [generic] X-Received-From: 212.227.126.171 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:163656 Archived-At: Am 26.09.2013 03:12, schrieb Stephen J. Turnbull: > Matthias Dahl writes: > > Hello Stefan... > > > > > Security problems in Emacs are everywhere, indeed. > > > > Actually not quite the statement one wants to read _ever_ about the > > software one loves to use. ;) > > > > The question that is bugging me now: Why is that? Since Emacs, imho, > > addresses a more technical audience and is maintained by professionals, > > I wouldn't expect such a thing, actually. > > Then your model of security is inadequate. Software is *inherently* > insecure. [ ... ] That's it. BTW why don't we drive armored cars in daily life, if armored chars are designed to be more secure? Because experiences in a dry and rocky region proved the opposite.