From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Dan =?utf-8?B?xIxlcm3DoWs=?= Newsgroups: gmane.emacs.help Subject: Re: Ubuntu 16.04 server --- Contacting host: elpa.gnu.org:80 when package-refresh-contents Date: Wed, 17 Jan 2018 15:28:21 +0100 Message-ID: <87po684l16.fsf@cgc-instruments.com> References: <20180117121229.GB14008@tuxteam.de> NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Trace: blaine.gmane.org 1516199304 4338 195.159.176.226 (17 Jan 2018 14:28:24 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Wed, 17 Jan 2018 14:28:24 +0000 (UTC) To: help-gnu-emacs@gnu.org Original-X-From: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane.org@gnu.org Wed Jan 17 15:28:19 2018 Return-path: Envelope-to: geh-help-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ebohA-0008SG-4F for geh-help-gnu-emacs@m.gmane.org; Wed, 17 Jan 2018 15:28:04 +0100 Original-Received: from localhost ([::1]:39756 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ebojA-0003ve-5x for geh-help-gnu-emacs@m.gmane.org; Wed, 17 Jan 2018 09:30:08 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:46868) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ebohd-00036e-4x for help-gnu-emacs@gnu.org; Wed, 17 Jan 2018 09:28:34 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ebohZ-0002YN-3n for help-gnu-emacs@gnu.org; Wed, 17 Jan 2018 09:28:33 -0500 Original-Received: from cgc-instruments.com ([83.169.1.125]:59833) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1ebohY-0002X3-Sr for help-gnu-emacs@gnu.org; Wed, 17 Jan 2018 09:28:29 -0500 Original-Received: from Eclipse.local (p578FE14A.dip0.t-ipconnect.de [87.143.225.74]) by cgc-instruments.com (Postfix) with ESMTPSA id AD678A1261 for ; Wed, 17 Jan 2018 15:28:26 +0100 (CET) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=cgc-instruments.com; b=S6J7uwHzdYHg/O4ZO60G0eylBNI7cKELi6XcweObC2GXY+lNmwqERxppQvZTJm6EniI7JEkTUCQfdhTSkhoQuw3pAonWF9ITr8GDcqWZWCXDFswvAgBTSo6V1Gjh+olNiicl/o3EzbudHnp6w4SzwzEDw4k16D/bfW03dF6j4S8=; h=From:To:Subject:In-Reply-To:References:Date:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding; In-Reply-To: X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x [fuzzy] X-Received-From: 83.169.1.125 X-BeenThere: help-gnu-emacs@gnu.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: Users list for the GNU Emacs text editor List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane.org@gnu.org Original-Sender: "help-gnu-emacs" Xref: news.gmane.org gmane.emacs.help:115760 Archived-At: The tile sounds a little click-baity, but it is actually a good tutorial how to secure the connection to (m)elpa. Afaik there has been no malware on melpa, but if you download your packages via http, someone could in theory tamper with your connection and inject malicious code. So, don't panic & use https ;-) Rusi writes: > On Wednesday, January 17, 2018 at 6:11:59 PM UTC+5:30, Dan =C4=8Cerm=C3= =A1k wrote: >> If you are setting up a new emacs client, you might want to take a look >> at this too: https://glyph.twistedmatrix.com/2015/11/editor-malware.html > > Hoo Boy! > Was wondering when this would become a thing=E2=80=A6