From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Dmitry Gutov Newsgroups: gmane.emacs.devel Subject: Re: Maintainers and contributors Date: Thu, 22 Oct 2015 22:08:12 +0300 Message-ID: <5629341C.8050806@yandex.ru> References: <87si59wj42.fsf@T420.taylan> <87a8ren5ys.fsf@T420.taylan> <56259BB1.3070908@cs.ucla.edu> <878u6ykmvt.fsf@T420.taylan> <87h9llvo98.fsf@members.fsf.org> <5626622A.3090707@yandex.ru> <87zizdijbp.fsf@T420.taylan> <56267302.7050606@yandex.ru> <87io61igyu.fsf@T420.taylan> <56267CDF.6010201@yandex.ru> <87wpuhh15s.fsf@T420.taylan> <562683B9.1060305@yandex.ru> <83y4exe71v.fsf@gnu.org> <87fv13xirw.fsf@fencepost.gnu.org> <5628D0D2.4050507@yandex.ru> <87bnbrxewt.fsf@fencepost.gnu.org> <83d1w7szw2.fsf@gnu.org> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-Trace: ger.gmane.org 1445540928 2801 80.91.229.3 (22 Oct 2015 19:08:48 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Thu, 22 Oct 2015 19:08:48 +0000 (UTC) To: Eli Zaretskii , David Kastrup , emacs-devel@gnu.org, bruce.connor.am@gmail.com, =?UTF-8?Q?Taylan_Ulrich_Bay=c4=b1rl=c4=b1/Kammer?= Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Thu Oct 22 21:08:36 2015 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1ZpLDz-0005ag-8W for ged-emacs-devel@m.gmane.org; Thu, 22 Oct 2015 21:08:31 +0200 Original-Received: from localhost ([::1]:34007 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZpLDt-0000NC-7D for ged-emacs-devel@m.gmane.org; Thu, 22 Oct 2015 15:08:25 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:39321) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZpLDp-0000N5-UM for emacs-devel@gnu.org; Thu, 22 Oct 2015 15:08:22 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ZpLDk-00014U-SD for emacs-devel@gnu.org; Thu, 22 Oct 2015 15:08:21 -0400 Original-Received: from mail-wi0-x235.google.com ([2a00:1450:400c:c05::235]:35346) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZpLDk-00014J-Lx; Thu, 22 Oct 2015 15:08:16 -0400 Original-Received: by wicll6 with SMTP id ll6so2311328wic.0; Thu, 22 Oct 2015 12:08:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=sender:subject:to:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-type:content-transfer-encoding; bh=skOO0GtJ65uRQfkHExVPmXggBtUnhKz1TXNT/xx6XkQ=; b=FtlASuRkKvO+qyqGEHqVIwURVPEQxpcMEb5s6BeAuOynvxULCJVFL/gf8cOb8l0dHn WRa3nbvb5ACssImTU7i009k5etPX4z0IVamDLHFAthcuvIgodkXUwUb8NK91RTUv7Q/A IsWGx3lWjhOXq/UKoNCENdC+qEYJSg8sJrKOkahKhSCBq0htYi0wB6N8kb9NYVO1/Tq0 gzrZzoREYPPsJH6cB9ml9J79wdawwwnNV5m9eOFYZp+X3d4MqpyrHmgSIeKKIikYYjPw HEPh4V8rUOWcsJ50KArZhNBaHNtDeNoosCcesehI/IivtVnVHadzIu/xHd7YPHQn8QWY Wp2g== X-Received: by 10.194.58.175 with SMTP id s15mr153716wjq.66.1445540896014; Thu, 22 Oct 2015 12:08:16 -0700 (PDT) Original-Received: from [192.168.1.2] ([185.105.175.24]) by smtp.googlemail.com with ESMTPSA id lv4sm18489940wjb.43.2015.10.22.12.08.14 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 22 Oct 2015 12:08:15 -0700 (PDT) User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:42.0) Gecko/20100101 Thunderbird/42.0 In-Reply-To: X-detected-operating-system: by eggs.gnu.org: Error: Malformed IPv6 address (bad octet value). X-Received-From: 2a00:1450:400c:c05::235 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:192421 Archived-At: On 10/22/2015 09:27 PM, John Wiegley wrote: > As it stands, the falling out with Taylan was not entirely technical. I've > spoken to Taylan on IRC, and he is actually a very reasonable fellow. Mainly, > there was a difference between his desire, and his position, that we missed: He indeed gives that impression, most of the time. > Desire: Avoid security vulnerabilities in his code. That desire itself ("in his code" vs "in Emacs") doesn't make much sense, because you cannot use his code without using Emacs. And Emacs uses shell-quote-argument in many places. If that function is vulnerable, you're most likely screwed anyway. > Position: `shell-quote-argument' violates this desire, and should not be > used. Since emacs-devel probably can't fix `shell-quote-argument' > today, rewrite it until it is fixed. > > Had the discussion been about this desire, we could have talked about whether > he should bother worrying about security in the context of Emacs, since we > generally don't put much focus there. Eli did start to mention this, but I > think it was lost in the storm, or seen as a dodge. This point and others have been made. Like Eli said in another email, some people just can't accept different views.