From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Lars Ingebrigtsen Newsgroups: gmane.emacs.devel Subject: Re: Recent fix in handling vc-tor Date: Thu, 22 Sep 2022 12:51:59 +0200 Message-ID: <87tu4z7kc0.fsf@gnus.org> References: Mime-Version: 1.0 Content-Type: text/plain Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="38067"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/29.0.50 (gnu/linux) Cc: emacs-devel@gnu.org, "'Eli Zaretskii'" To: Richard Stallman Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Thu Sep 22 12:55:25 2022 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1obJrY-0009kW-Ti for ged-emacs-devel@m.gmane-mx.org; Thu, 22 Sep 2022 12:55:24 +0200 Original-Received: from localhost ([::1]:57938 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1obJrX-0004qN-RA for ged-emacs-devel@m.gmane-mx.org; Thu, 22 Sep 2022 06:55:23 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:51136) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1obJoP-0002EA-3L for emacs-devel@gnu.org; Thu, 22 Sep 2022 06:52:09 -0400 Original-Received: from quimby.gnus.org ([2a01:4f9:2b:f0f::2]:42942) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1obJoN-0004na-HE; Thu, 22 Sep 2022 06:52:08 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnus.org; s=20200322; h=Content-Type:MIME-Version:Message-ID:Date:References: In-Reply-To:Subject:Cc:To:From:Sender:Reply-To:Content-Transfer-Encoding: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=3uwd3eOzBbsEQkVEqjBPtEJD2HgbHK5LMKzptKdvctk=; b=vPIu7Rj1GVo4wV+QByd7pP/UIs 2bWJjQLx/bRow6z4Yqw1QOVF9gWrlwKatUhZQ339YuwVw7fs5gg0h08aYG5Qw9w91i39/Rdv4T4Mp gkjuK3jfSOLMxRPPcBrWQSqhUO3q48dEYU9GIF/vy2GiAjuXLvUOo5E03SAhWw40q8Nw=; Original-Received: from [84.212.220.105] (helo=joga) by quimby.gnus.org with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1obJoG-0007tK-E9; Thu, 22 Sep 2022 12:52:02 +0200 In-Reply-To: (Richard Stallman's message of "Wed, 21 Sep 2022 23:12:55 -0400") Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAABGdBTUEAALGPC/xhBQAAACBj SFJNAAB6JgAAgIQAAPoAAACA6AAAdTAAAOpgAAA6mAAAF3CculE8AAAAElBMVEVBR1MTEhVTn+s/ Z52/r6z///8nA0HJAAAAAWJLR0QF+G/pxwAAAAd0SU1FB+YJFgojDiAt570AAAGoSURBVDjLbZOB dYMwDESlmgGs0AFaOwMY3AFc4v1nqk4yAZLCSx74c6eTMMQSM4sIfpGII4kQk+ASIHYQquNYFwo8 b7rWezdAFAg/pspzYvlUwCdFXYgkVpFJQXOFH0wUuehKH16WgREA1BXqFXGtwUyhZgMsEiMz/Kpb wmJqMBEAtGNHwYpoCPYiFq08wWT/+rRYJ9aLg0bdbfgMIqH8L7wUFAMVoLd+AlohOIi9nRQorZHN avpViKGgYwdUDDTZh2IgVNJKdjvtIABo66GiiM6S6ADVZnJvFn9yRaxhgLk/bCLkxQ8Q7g8Z80W1 +QQ2a711miDYQa59kzHADsEOUiplgOkF5GUXABR6gpSRqrCDlA+gbj/oG3FnPHiAlG0iXeLNbi3V apeLS+gjDULJybdLmj+mBEOua01f0UAY6/fsb1yV9j76Y1ckEnm2BzC/g+jbYX0Hvh1uB/ANJ2yS OL8pyED9x8rKb7a6XoB5Gch6HkBrQbKaYD0DssQQvAFI1CvnSw2tDsmG0V5S4ZuiPdYFUNTPZ0uZ 1pc+sH+19kNeAOHEmr/tP8Z4f61SELGbAAAAJXRFWHRkYXRlOmNyZWF0ZQAyMDIyLTA5LTIyVDEw OjM1OjEzKzAwOjAwsJXROwAAACV0RVh0ZGF0ZTptb2RpZnkAMjAyMi0wOS0yMlQxMDozNToxMysw MDowMMHIaYcAAAAASUVORK5CYII= X-Now-Playing: James Taylor's _Sweet Baby James_: "Oh, Susannah" Received-SPF: pass client-ip=2a01:4f9:2b:f0f::2; envelope-from=larsi@gnus.org; helo=quimby.gnus.org X-Spam_score_int: -43 X-Spam_score: -4.4 X-Spam_bar: ---- X-Spam_report: (-4.4 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.io gmane.emacs.devel:295967 Archived-At: Richard Stallman writes: > The bug that made setting vc-tor a no-op was particularly treacherous. > since the feature led people to believe they got some protection > for their privacy, but it didn';t actually work. > > I think we should release a 28.3 with this change, and fairly soon, > even if no other changes are needed. vc-tor is for using VC commands via Tor? Emacs does not, in general, work well with Tor -- Emacs leaks all over the place (especially w.r.t. DNS lookups), so somebody trying to retain full privacy by setting that variable will probably be found out anyway. But it does seem like a pretty bad problem, even if I expect that virtually nobody is using vc-tor, so perhaps we should do an Emacs 28.3 release. I'm not at all sure, though. Eli, what do you think?