From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED.blaine.gmane.org!not-for-mail From: Alexandre Garreau Newsgroups: gmane.emacs.devel Subject: Re: Does service lookup by name work on Windows now? Date: Sun, 27 Jan 2019 22:08:11 +0100 Message-ID: <871s4xn70k.fsf@portable.galex-713.eu> References: <83ef8z6394.fsf@gnu.org> <83bm43620q.fsf@gnu.org> <83a7jn60iu.fsf@gnu.org> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="=-=-=" Injection-Info: blaine.gmane.org; posting-host="blaine.gmane.org:195.159.176.226"; logging-data="266733"; mail-complaints-to="usenet@blaine.gmane.org" User-Agent: Gnus (5.13), GNU Emacs 25.1.1 (i686-pc-linux-gnu, GTK+ Version 3.22.11) of 2017-09-15, modified by Debian Cc: Eli Zaretskii , Emacs developers , rms@gnu.org, rpluim@gmail.com To: Tim Cross Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Sun Jan 27 22:08:46 2019 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([209.51.188.17]) by blaine.gmane.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1gnrfX-0017CR-1R for ged-emacs-devel@m.gmane.org; Sun, 27 Jan 2019 22:08:43 +0100 Original-Received: from localhost ([127.0.0.1]:50439 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gnrfV-000220-V6 for ged-emacs-devel@m.gmane.org; Sun, 27 Jan 2019 16:08:41 -0500 Original-Received: from eggs.gnu.org ([209.51.188.92]:57769) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gnrfM-00021h-AE for emacs-devel@gnu.org; Sun, 27 Jan 2019 16:08:33 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gnrfD-0002M7-1i for emacs-devel@gnu.org; Sun, 27 Jan 2019 16:08:26 -0500 Original-Received: from portable.galex-713.eu ([2a00:5884:8305::1]:45378) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1gnrf9-0002Im-30; Sun, 27 Jan 2019 16:08:20 -0500 Original-Received: from localhost ([::1] helo=portable.galex-713.eu) by portable.galex-713.eu with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.89) (envelope-from ) id 1gnrf1-00029G-Ba; Sun, 27 Jan 2019 22:08:11 +0100 PGP-FINGERPRINT: E109 9988 4197 D7CB B0BC 5C23 8DEB 24BA 867D 3F7F Accept-Language: fr, en, eo, it In-Reply-To: (Tim Cross's message of "Sun, 27 Jan 2019 16:11:17 +1100") X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 2a00:5884:8305::1 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.org gmane.emacs.devel:232739 Archived-At: --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 2019-01-27 at 16:11, Tim Cross wrote: > The only problem with continuing to support any OS which is no longer > maintained is that, in many cases, we are implicitly supporting users on > platforms with significant and well known exploits. This is especially tr= ue > with Windows XP, which has numerous, well documented and easy to exploit > vulnerabilities. If so it=E2=80=99d mean emacs would be supporting Windows at all, so it sho= uld stop supporting it at all, which complies with what previously said. However emacs is present on Windows to give a (imho, very good) taste of what free software can be (in one of the best way of showing it), so to advertise for other operating systems, so it=E2=80=99s not supporting anyth= ing at all but freedom. > While I would agree that the decision to use a vulnerable OS is up to the > individual user, in practice, many users don't understand the risks and > consequences. To make it worse, exploited systems can also be a threat (or > inconvenience) to other users (for example, by being the source of botnets > or DDoS attacks). When a computer is under Windows XP it is often because it=E2=80=99s simply impossible to switch. It is then way better to allow most of (free) software(s) to keep being updated on these, as otherwise it=E2=80=99s simply that the old versions of these are going to be used instead, increasing the attack surface. So this is an argument supporting much more the reverse: it would harm to make emacs stop supporting XP. Also a lot of XP computers are ran on special hardware that allegedly can=E2=80=99t be changed at all without more problem (I=E2=80=99ve heard = =E2=80=9Cnuclear plants=E2=80=9D once, meanwhile I effectively observed XP being consistently used in nuclear installations, though not active nuclear plants), and that is consequently kept offline (yes there are offline attacks such as worms, stuxnet, etc. but that=E2=80=99s also a question of policy). Also while I regularely see Vista being used by many unaware uncaring users, I didn=E2=80=99t see XP since a very long time ago except on compute= rs of more expecienced peoples that *had* the technical knowledge allowing them to know there is indeed more crap in Vista than XP. So I believe the technical level of awareness is better for XP users than Vista users in the end. > There is an argument that it would be more responsible to not support any > OS once it is no longer maintained and receiving patches for security > vulnerabilities to discourage continued use of vulnerable systems and > encourage users to update to a current and more secure OS (which of course > could be GNU Linux!). This may also make maintenance of Emacs easier as = it > would reduce the need for exceptions and work arounds for older systems > which don';t support more modern OS practices. Quirks are to be excepted from everywhere. Especially from old not-that-used UNIXes: Windows is much more a case of something consistent with itself (since it=E2=80=99s completely opaque), and used by = many many many people (so it=E2=80=99s less work to make it compatible with more environments). It=E2=80=99s not only the fault of old systems but much more from diversity. That is something you mostly find in more =E2=80=9Copen=E2=80=9D (lots of c= ommercial UNIXes), free (all the free distributions), and imho is going to increase in the future, albeit some other proprietary, highly insecure, and widely as well as increasingly used non-GNU/Linux systems, such as Android (which imho is going to be with time way worse than anything XP could have been). Btw it=E2=80=99s GNU/Linux, GNU=E2=80=93Linux, GNU-Linux, etc=E2=80=A6 mayb= e even =E2=80=9CGNU=E2=80=9D alone in some cases =E2=80=A6but not =E2=80=9CGNU Linux=E2=80=9D, since we are talki= ng of the whole operating system, not some =E2=80=9CLinux=E2=80=9D (which is a kernel), whi= ch would be from GNU (and there is none, or you are confusing with GNU Linux-libre maybe). --=-=-= Content-Type: multipart/related; boundary="==-=-=" --==-=-= Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable

On 2019-01-27 at 16:11, Tim Cross wrote:

The only problem with continuing to support any OS which is no longer maintained is that, in many cases, we are implicitly supporting users on platforms with significant and well known exploits. This is especially true with Windows XP, which has numerous, well documented and easy to exploit vulnerabilities.

If so it=E2=80=99d mean emacs would be supporting Windows at all, so it sho= uld stop supporting it at all, which complies with what previously said.

However emacs is present on Windows to give a (imho, very good) taste of what free software can be (in one of the best way of showing it), so to advertise for other operating systems, so it=E2=80=99s not supporting anyth= ing at all but freedom.

While I would agree that the decision to use a vulnerable OS is up to the individual user, in practice, many users don't understand the risks and consequences. To make it worse, exploited systems can also be a threat (or inconvenience) to other users (for example, by being the source of botnets or DDoS attacks).

When a computer is under Windows XP it is often because it=E2=80=99s simply impossible to switch. It is then way better to allow most of (free) software(s) to keep being updated on these, as otherwise it=E2=80=99s simply that the old versions of these are going to be used instead, increasing the attack surface. So this is an argument supporting much more the reverse: it would harm to make emacs stop supporting XP.

Also a lot of XP computers are ran on special hardware that allegedly can=E2=80=99t be changed at all without more problem (I=E2=80=99ve heard = =E2=80=9Cnuclear plants=E2=80=9D once, meanwhile I effectively observed XP being consistently used in nuclear installations, though not active nuclear plants), and that is consequently kept offline (yes there are offline attacks such as worms, stuxnet, etc. but that=E2=80=99s also a question of policy).

Also while I regularely see Vista being used by many unaware uncaring users, I didn=E2=80=99t see XP since a very long time ago except on compute= rs of more expecienced peoples that had the technical knowledge allowing them to know there is indeed more crap in Vista than XP. So I believe the technical level of awareness is better for XP users than Vista users in the end.

There is an argument that it would be more responsible to not support any OS once it is no longer maintained and receiving patches for security vulnerabilities to discourage continued use of vulnerable systems and encourage users to update to a current and more secure OS (which of course could be GNU Linux!). This may also make maintenance of Emacs easier as it would reduce the need for exceptions and work arounds for older systems which don';t support more modern OS practices.

Quirks are to be excepted from everywhere. Especially from old not-that-used UNIXes: Windows is much more a case of something consistent with itself (since it=E2=80=99s completely opaque), and used by = many many many people (so it=E2=80=99s less work to make it compatible with more environments).

It=E2=80=99s not only the fault of old systems but much more from diversity. That is something you mostly find in more =E2=80=9Copen=E2=80=9D (lots of c= ommercial UNIXes), free (all the free distributions), and imho is going to increase in the future, albeit some other proprietary, highly insecure, and widely as well as increasingly used non-GNU/Linux systems, such as Android (which imho is going to be with time way worse than anything XP could have been).

Btw it=E2=80=99s GNU/Linux, GNU=E2=80=93Linux, GNU-Linux, etc=E2=80=A6 mayb= e even =E2=80=9CGNU=E2=80=9D alone in some cases =E2=80=A6but not =E2=80=9CGNU Linux=E2=80=9D, since we are talki= ng of the whole operating system, not some =E2=80=9CLinux=E2=80=9D (which is a kernel), whi= ch would be from GNU (and there is none, or you are confusing with GNU Linux-libre maybe).

--==-=-=-- --=-=-=--