From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Ricardo Wurmus Newsgroups: gmane.emacs.devel Subject: Re: Concurrency, again Date: Wed, 19 Oct 2016 10:52:02 +0200 Message-ID: <87vawosoul.fsf@elephly.net> References: <87wq97i78i.fsf@earlgrey.lan> <86k2dk77w6.fsf@molnjunk.nocrew.org> <9D64B8EA-DB52-413D-AE6A-264416C391F3@iotcl.com> <83int1g0s5.fsf@gnu.org> <83twckekqq.fsf@gnu.org> <83mvi9a3mh.fsf@gnu.org> <20161012165911.58437154@jabberwock.cb.piermont.com> <20161012173314.799d1dc5@jabberwock.cb.piermont.com> <8360owaj2s.fsf@gnu.org> <20161013092701.77461800@jabberwock.cb.piermont.com> <20161017105345.2f255760@jabberwock.cb.piermont.com> <83y41nx8l6.fsf@gnu.org> <20161017123459.5ded9408@jabberwock.cb.piermont.com> NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Trace: blaine.gmane.org 1476867245 1293 195.159.176.226 (19 Oct 2016 08:54:05 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Wed, 19 Oct 2016 08:54:05 +0000 (UTC) User-Agent: mu4e 0.9.16; emacs 25.1.1 Cc: jwiegley@gmail.com, eliz@gnu.org, emacs-devel@gnu.org, monnier@iro.umontreal.ca, "Perry E. Metzger" To: rms@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Wed Oct 19 10:54:01 2016 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1bwmd7-00066h-34 for ged-emacs-devel@m.gmane.org; Wed, 19 Oct 2016 10:53:45 +0200 Original-Received: from localhost ([::1]:46402 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bwmd9-0000G4-6Y for ged-emacs-devel@m.gmane.org; Wed, 19 Oct 2016 04:53:47 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:45104) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bwmc1-0008PS-6H for emacs-devel@gnu.org; Wed, 19 Oct 2016 04:52:38 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1bwmc0-0002fv-AT for emacs-devel@gnu.org; Wed, 19 Oct 2016 04:52:37 -0400 Original-Received: from sender163-mail.zoho.com ([74.201.84.163]:21425) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1bwmbs-0002Ys-W2; Wed, 19 Oct 2016 04:52:29 -0400 Original-Received: from localhost (x2f74fb7.dyn.telefonica.de [2.247.79.183]) by mx.zohomail.com with SMTPS id 14768671281506.663606561773008; Wed, 19 Oct 2016 01:52:08 -0700 (PDT) In-reply-to: X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x X-Received-From: 74.201.84.163 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.org gmane.emacs.devel:208464 Archived-At: Richard Stallman writes: > [[[ To any NSA and FBI agents reading my email: please consider ]]] > [[[ whether defending the US Constitution against all enemies, ]]] > [[[ foreign or domestic, requires you to follow Snowden's example. ]]] > > > Every open browser tab (should I say "window", this being emacs?) can > > potentially be doing all sorts of computation in the background via > > JavaScript, > > We should not make Emacs a platform for running nonfree software > sent from servers designed to snoop on people. > > An ethical web browser requires lots of work. We made have IceCat by > changing Firefox so that > (1) it doesn't by default run nonfree programs, and > (2) it blocks various kinds of schemes to track or fingerprint users. > > If Emacs is going to have a web browser powerful enough to be vulnerable > to these things, then it too has to be changed to defend against them. Emacs has the potential for a fully functional browser since the addition of the xwidget feature. (The current implementation is not yet very usable but it doesn’t take much work to make it usable enough for common browsing tasks.) We can disable execution of *any* JavaScript by default (by changing the initial settings in Webkit) and/or add hooks to run Elisp procedures that decide whether or not to run JavaScript, e.g. by inspecting license information. With the Webkit xwidget we can also send our own JavaScript to the widget to have it executed *instead* of whatever the web page loads. This would work similar to what the dotjs extension does for Firefox/Icecat. I’d like to prepare some patches to implement this. (I was told that my copyright assignment is now complete.) (Blocking fingerprinting and tracking attempts is harder and I don’t know how to approach this.) ~~ Ricardo