From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: arthur miller Newsgroups: gmane.emacs.help Subject: RE: Sv: Install orgmode using its git repository. Date: Tue, 29 Dec 2020 17:18:58 +0000 Message-ID: References: , <86h7o4vd8c.fsf@x201.butler.org> Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="20132"; mail-complaints-to="usenet@ciao.gmane.io" To: Leo Butler , help-gnu-emacs Original-X-From: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane-mx.org@gnu.org Tue Dec 29 18:19:29 2020 Return-path: Envelope-to: geh-help-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kuIef-00058P-EU for geh-help-gnu-emacs@m.gmane-mx.org; Tue, 29 Dec 2020 18:19:29 +0100 Original-Received: from localhost ([::1]:35294 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1kuIee-00065v-HM for geh-help-gnu-emacs@m.gmane-mx.org; Tue, 29 Dec 2020 12:19:28 -0500 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:50298) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kuIeE-00064R-Tp for help-gnu-emacs@gnu.org; Tue, 29 Dec 2020 12:19:02 -0500 Original-Received: from mail-am7eur06olkn2085.outbound.protection.outlook.com ([40.92.16.85]:62689 helo=EUR06-AM7-obe.outbound.protection.outlook.com) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kuIeC-0000Aq-UE for help-gnu-emacs@gnu.org; Tue, 29 Dec 2020 12:19:02 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=TZHqi9On+EpoLEyKn+03cujGAPWX5UTnxh0q+J+ZwXNrUeFvEEXTL/JARyPuSKMJBJdaKUDvJxFxBVF1Kiq0PZH7ELDL5rmDzc9vyzvgrw8OgwCEF2JZMBSTHXDyBOO39sBA82dCNK4c5lW+29fDrFOp+IO4EBlvpsY0MAmaDj+boQWPK62cZCjNSk5UI/i/OHJR/luZPIAmdyDJ1MbLlfmBtI4wTNoTfp8WwCgW8dJhQj6+NK/HqfTE7KPZc6FKp7VKlgYkTxkhLxWZhFlX0Zc6ay3BOsKZQOki0k5cir3rq4KgceJMP2LsUIsvOG9m3IyLiv0Hm4XRiRqah36mcw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=kn9I9VIrPXohrQmDZ/+WVDACsnyUiYoamWBGxNorM7U=; b=SNzxkf3K3SQJwT2worQ+4gYV4bu1SZyVRrSiUxYoTZ4LQ3sY8YZ+f6K5L0iebPrDWEoSFvVmOg8+WR+I/I0OFclT+RY08nl9tY8eX5CO+eODgukujD6EcKr+sMdk2RKXPlxs6BYDQVcZ8Olc9jun9GMeHhiFL/X9nb/PYkOTJab/i9tYrmbzad2KLeiIESvIDJuGotVOQPYBM4ORG5D7daTPNBg8cygf2isc800zHUQmePHam/5diD9e9XzQ3Mwyc51ulDJl0AsPXnwXgRDx2fF/THrl6BfoW5w8tNyGsXJib0eyoLhkWknSOxfYn1HGD/fxEc15MKNIcP8u1a6+Qw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=live.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=kn9I9VIrPXohrQmDZ/+WVDACsnyUiYoamWBGxNorM7U=; b=sIE8HwQeq27Zn2JBnu5UPBpGJ1LPxPH2qelXyzZJbZOzc7H3s5w4cpIwx1/5l1rXkhUq4CA08YBiDJ4pHhoarsiuqbpzmdrsmiYoHp5XAAvTLqcCeXnGKfzDFI+YJA+d5zNasVafJ5g7D31f7FJeHEEMWj/WL5MqEeFUKo4wKBbyLpwjbzD4ScF7Ih2Uqbpo71Jji+fDvAZ5ahO9zDkZuOkI30E6nBw2eWCbY2BXwSkALH0OgfyXHRzrHQAqNSG2jXO89EllyvybKZ5j9Wb9ZfR7+ZuarposnKzgOTehGKx5vZWa500j6FJfMWGbp9YspMLJzFXUoxwYdeJw4NXFcg== Original-Received: from AM7EUR06FT032.eop-eur06.prod.protection.outlook.com (2a01:111:e400:fc36::4e) by AM7EUR06HT014.eop-eur06.prod.protection.outlook.com (2a01:111:e400:fc36::368) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3700.27; Tue, 29 Dec 2020 17:18:58 +0000 Original-Received: from AM0PR06MB6577.eurprd06.prod.outlook.com (2a01:111:e400:fc36::53) by AM7EUR06FT032.mail.protection.outlook.com (2a01:111:e400:fc36::343) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3700.27 via Frontend Transport; Tue, 29 Dec 2020 17:18:58 +0000 Original-Received: from AM0PR06MB6577.eurprd06.prod.outlook.com ([fe80::9487:8c7d:da00:4993]) by AM0PR06MB6577.eurprd06.prod.outlook.com ([fe80::9487:8c7d:da00:4993%7]) with mapi id 15.20.3700.031; Tue, 29 Dec 2020 17:18:58 +0000 Thread-Topic: Sv: Install orgmode using its git repository. Thread-Index: AQHW3Bjaznl7J3VjC0Grm64qcoLuoKoLH4fAgACEnQCAAFZsZIAABSEAgAAnFGGAAOYn1IAAGdncgAEVbVyAABj+/g== In-Reply-To: <86h7o4vd8c.fsf@x201.butler.org> Accept-Language: sv-SE, en-US Content-Language: sv-SE x-incomingtopheadermarker: OriginalChecksum:549BD75D6595C90B3DB8A8F8482CF160FBE9158A8FF22AE74C1E3B5BE02F891D; UpperCasedChecksum:04DF67E510DA53FE6D52B3FB6C67B5DF3474BBD6E483B8E6003FD45513A49851; SizeAsReceived:7425; Count:44 x-ms-exchange-messagesentrepresentingtype: 1 x-tmn: [2HKjdb6jQ2WKKmzJPOl9k64fxmcSaMHC] x-ms-publictraffictype: Email x-incomingheadercount: 44 x-eopattributedmessage: 0 x-ms-office365-filtering-correlation-id: f7fcf56c-8e22-4520-fe91-08d8ac1dd3fc x-ms-traffictypediagnostic: AM7EUR06HT014: x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: KTxQK71GHLWGYuKtGXg5j2Yui+fUkvoqLHy9NL4ujFqDl7xV+ykEXicC1hhPDXUIqSBbmGooCxTD1O8/kqFgq5qlB4xMhScc4F4+g8ZedtqsazrzsAWrzm5yqDDp53ZtLGTqKsbCc35yyURjiLt2iKdZHKCb1fpkxBDFYhRfB3LHafdjl1UZ/LZfZk9TSCtsHWJ5pwD3Jw2ZvAfME3xrRzRVTkY0cAwSmcoZ5BCLLCmJBuWK9x7X315FZax2Z07b x-ms-exchange-antispam-messagedata: boUbOf3OnOAGfylPscP7Hgcqg2JiDEDxd0OrfFoOXjGPBoI7loTGdmL9xBq/kdg4M+UzAJ4Mm6oajpLAqWTDu0UQmh+xKMlLq3k+NxlZv1SSWAsrgXwjAf83Tm/K2k4QzBCsLqRkdIvnL18XmgIwMA== x-ms-exchange-transport-forked: True X-OriginatorOrg: live.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-AuthSource: AM7EUR06FT032.eop-eur06.prod.protection.outlook.com X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-CrossTenant-Network-Message-Id: f7fcf56c-8e22-4520-fe91-08d8ac1dd3fc X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Dec 2020 17:18:58.2989 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Internet X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM7EUR06HT014 Received-SPF: pass client-ip=40.92.16.85; envelope-from=arthur.miller@live.com; helo=EUR06-AM7-obe.outbound.protection.outlook.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: help-gnu-emacs@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Users list for the GNU Emacs text editor List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane-mx.org@gnu.org Original-Sender: "help-gnu-emacs" Xref: news.gmane.io gmane.emacs.help:126903 Archived-At: Also if it is only for the org, one can add org package archive and fetch i= t via package.el already. I use to do it, so bare git access is certainly n= ot mandatory to install latest org, if one that comes with Emacs is not eno= ugh. -------- Originalmeddelande -------- Fr=E5n: Leo Butler Datum: 2020-12-29 16:49 (GMT+01:00) Till: help-gnu-emacs =C4mne: Re: Sv: Install orgmode using its git repository. arthur miller writes: > N=F6je of that you write is particularly adequate "addressing" of potenti= al security vulnerability that let's potential malicious code 1) install an= ything on your machine 2) steal your data 3) destroy your data. > > Maybe a virtual machine, but then you wouldn't be running your Emacs for = anything sensitive or serious. Actually, *nix systems have a very good way to handle these kinds of threats without resort to such devices: users and groups. One can create a user account with very limited privileges for working with unvetted code, data, etc. Actually, I do this for developing new code, too. That way, whatever I break/change is contained within the confines of that account. > > A reviewed package from elpa/helps gives at least some guarantee that you= are not getting binary blobs and/or directly malicious code installed on y= our machine. Leo > > > -------- Originalmeddelande -------- > Fr=E5n: David Masterson > Datum: 2020-12-28 22:44 (GMT+01:00) > Till: arthur miller > Kopia: Hongyi Zhao , Stefan Monnier , help-gnu-emacs > =C4mne: Re: Sv: Install orgmode using its git repository. > > arthur miller writes: > >> I don't think it is very safe practice to install random Joe's code >> directly from some git repo. We have not yet seen malicious code (not >> what I know) in Emacs community, but Emacs in that respect is as bad >> as MS Office from time when VBA scripts (and viruses) were shared >> wildly around, or a web browserwith JS that can do anything. Remember >> time when JS was off by default in all browsers? Elisp can do >> whatever on your computer, so you should be careful what you >> install. Installing from random git repos can open you for more >> security problems then needed. I do clone lots from gitlab/github, but >> I always look at the code myself before I ever run it. >> >> Another point is that installing from git and different branches as it >> is possible with straight.el or quelpa (is what OP actually wants) can >> eventually lead to incompatibility between code that might be much >> harder to detect. I personally don't want to bother with latest-latest >> of all latest because eventually it could become a spagheti code of >> possible incompatibility and clashes. > > You can address these points in multiple ways: > > 1. A good backup and restore strategy > 2. Virtual machines (ie a chromebook) > 3. prioritize (m)elpa-stable over (m)elpa > 4. el-get can get particular version from git > ... > > -- > David Masterson