From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Juanma Barranquero Newsgroups: gmane.emacs.devel Subject: Re: GnuTLS for W32 Date: Fri, 6 Jan 2012 05:11:47 +0100 Message-ID: References: <87hb0b3yoe.fsf@lifelogs.com> <6ED011D5-E185-44C6-BB31-A445A4E5F83A@gmail.com> <87wr976otx.fsf@lifelogs.com> <87ipkq6yy5.fsf@lifelogs.com> <3FB40138-C766-4A45-8E5A-4E404449995E@gmail.com> <546D7C22-520D-46A9-8AA1-9D33CF2F6782@gmail.com> <87obuhpqrl.fsf@wanadoo.es> <87k455pncx.fsf@wanadoo.es> <87fwftpjqi.fsf@wanadoo.es> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Trace: dough.gmane.org 1325823163 682 80.91.229.12 (6 Jan 2012 04:12:43 GMT) X-Complaints-To: usenet@dough.gmane.org NNTP-Posting-Date: Fri, 6 Jan 2012 04:12:43 +0000 (UTC) Cc: emacs-devel@gnu.org To: =?UTF-8?Q?=C3=93scar_Fuentes?= Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Fri Jan 06 05:12:37 2012 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([140.186.70.17]) by lo.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1Rj1AP-0004kQ-VE for ged-emacs-devel@m.gmane.org; Fri, 06 Jan 2012 05:12:34 +0100 Original-Received: from localhost ([::1]:50865 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Rj1AP-0001Sy-Du for ged-emacs-devel@m.gmane.org; Thu, 05 Jan 2012 23:12:33 -0500 Original-Received: from eggs.gnu.org ([140.186.70.92]:52196) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Rj1AM-0001Si-Ig for emacs-devel@gnu.org; Thu, 05 Jan 2012 23:12:31 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Rj1AL-0004Qp-9S for emacs-devel@gnu.org; Thu, 05 Jan 2012 23:12:30 -0500 Original-Received: from mail-pw0-f41.google.com ([209.85.160.41]:37821) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Rj1AL-0004Ql-3X for emacs-devel@gnu.org; Thu, 05 Jan 2012 23:12:29 -0500 Original-Received: by pbdd2 with SMTP id d2so1125804pbd.0 for ; Thu, 05 Jan 2012 20:12:28 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type:content-transfer-encoding; bh=wjIGf3I6Ab1dhEy//p1a4H9JHhe8oLOsn1C9lz3XrgI=; b=DoZl44IApwTfX76N6u1ldmwdmzGKwyCzG8mswbm0cGtIYKoVyLcNr+FMbspjdBmCZU SOTaDEq0uFuKMP21U92foPsDpA5a5uKVHNHgecMi4yGNZ2pxXZ2vPyVvN8XJw+AbTJO3 EKnkNg+ncp5p5xK2HJoq6NcU9V2p1xIiSAIng= Original-Received: by 10.68.73.68 with SMTP id j4mr11650235pbv.40.1325823148193; Thu, 05 Jan 2012 20:12:28 -0800 (PST) Original-Received: by 10.142.247.28 with HTTP; Thu, 5 Jan 2012 20:11:47 -0800 (PST) In-Reply-To: <87fwftpjqi.fsf@wanadoo.es> X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6 (newer, 2) X-Received-From: 209.85.160.41 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:147387 Archived-At: On Fri, Jan 6, 2012 at 04:56, =C3=93scar Fuentes wrote: > Then I'm misunderstanding. IIRC you said, more or less: "we are a source > code shop and MS Windows is an exception because those users would have > a hard time getting an Emacs running on their machines". I fully > sympathize with the "we are a source code shop", but at the same time > I'll like to remark that the rest is no longer true. I don't know what causes your misunderstanding. I would prefer not to distribute binaries, can accept distributing our own because they are useful, dislike the idea of distributing other project's binaries unless they are *strictly* required to run our Emacs binary. > We are on emacs-devel, not on all-projects-devel. You were the one talking about "source-only worlds". > But now that you ask, yes, I'll appreciate that all projects would > include a system for notifying me that its software is putting my > machine at risk. If GnuTLS has a security issue, I wouldn't say that Emacs puts my machine at risk. GnuTLS does. > The key here is to determine what the Right Thing is. Have you > considered the possibility that some or most of those projects doesn't > have the automatic notification not because they think it is a bad idea, > but because some other reason? Why the second guessing? I was told that almost all software packages today did automatic upgrading, and I mentioned some that do not. I don't know why they don't offer it, and neither do you. > That's like saying that smoke detectors are unneeded because fires > rarely occur, if at all, on most housings. Nonsense. It's like saying that a smoke detector is not needed in this particular house because it is built with fireproof materials and the likelihood of a fire is almost zero. Do you have an smoke detector in your home? I don't. I don't have a fire extinguisher, either. > You are sidetracking from my question by going back to the GnuTLS dll. No, I'm not. > I'm genuinely interested in your reasoning for rejecting an > automatic notification system built into Emacs. That's what I've answered. > Something you can use to > warn users that a problem was found that would pose a risk to their data > (a security breach, data corruption, whatever). That's independent from > how the user obtained its binary package. There are zillions of ways their data could be lost. Are you going to add a program to Emacs to test the hard drive for bad spots? That kind of checks (updates, I mean, not the disk test tool ;-) instill false security. It's like the people who has an AV installed and thinks that it is protected because the AV software has not detected anything. =C2=A0 =C2=A0 Juanma