From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: =?utf-8?Q?=C3=93scar_Fuentes?= Newsgroups: gmane.emacs.devel Subject: Re: security of the emacs package system, elpa, melpa and marmalade Date: Thu, 26 Sep 2013 11:21:25 +0200 Message-ID: <87fvss9bvu.fsf@wanadoo.es> References: <523FEE1B.9020408@binary-island.eu> <52429ABD.6090603@binary-island.eu> <52432BE9.1070402@binary-island.eu> <5243F836.9020301@binary-island.eu> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1380187313 27991 80.91.229.3 (26 Sep 2013 09:21:53 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Thu, 26 Sep 2013 09:21:53 +0000 (UTC) To: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Thu Sep 26 11:21:55 2013 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1VP7lj-0000RO-EC for ged-emacs-devel@m.gmane.org; Thu, 26 Sep 2013 11:21:55 +0200 Original-Received: from localhost ([::1]:56957 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VP7li-0004QD-UM for ged-emacs-devel@m.gmane.org; Thu, 26 Sep 2013 05:21:54 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:49031) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VP7lb-0004Q8-6T for emacs-devel@gnu.org; Thu, 26 Sep 2013 05:21:53 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1VP7lT-0003TS-Pf for emacs-devel@gnu.org; Thu, 26 Sep 2013 05:21:47 -0400 Original-Received: from plane.gmane.org ([80.91.229.3]:34052) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VP7lT-0003QY-II for emacs-devel@gnu.org; Thu, 26 Sep 2013 05:21:39 -0400 Original-Received: from list by plane.gmane.org with local (Exim 4.69) (envelope-from ) id 1VP7lR-00008d-0k for emacs-devel@gnu.org; Thu, 26 Sep 2013 11:21:37 +0200 Original-Received: from 137.red-83-61-144.dynamicip.rima-tde.net ([83.61.144.137]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Thu, 26 Sep 2013 11:21:37 +0200 Original-Received: from ofv by 137.red-83-61-144.dynamicip.rima-tde.net with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Thu, 26 Sep 2013 11:21:37 +0200 X-Injected-Via-Gmane: http://gmane.org/ Original-Lines: 12 Original-X-Complaints-To: usenet@ger.gmane.org X-Gmane-NNTP-Posting-Host: 137.red-83-61-144.dynamicip.rima-tde.net User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3.50 (gnu/linux) Cancel-Lock: sha1:rAr/eeOJarf879SA2LyPWdnVIfQ= X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 80.91.229.3 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:163655 Archived-At: Matthias Dahl writes: >> Emacs is about empowering the user. > > Sure. But all of that does not necessarily contradict security or make > the code full of security leaks / holes. It is. Security, as implemented in practice, is about restricting users/software from doing things or, at best, "informing" the users about the implications of certain actions and asking for permission, questions equivalent to "do you trust me?." I answered that question once and for all the day I installed Emacs.