From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: storm@cua.dk (Kim F. Storm) Newsgroups: gmane.emacs.devel Subject: Re: Image mode Date: Tue, 06 Feb 2007 13:26:45 +0100 Message-ID: References: <87k5yxeg19.fsf@jurta.org> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: sea.gmane.org 1170764811 29727 80.91.229.12 (6 Feb 2007 12:26:51 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Tue, 6 Feb 2007 12:26:51 +0000 (UTC) Cc: Reiner Steib , emacs-devel@gnu.org, juri@jurta.org, cyd@MIT.EDU, Lars Magne Ingebrigtsen , miles@gnu.org To: rms@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Tue Feb 06 13:26:46 2007 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([199.232.76.165]) by lo.gmane.org with esmtp (Exim 4.50) id 1HEPPJ-0005qr-VM for ged-emacs-devel@m.gmane.org; Tue, 06 Feb 2007 13:26:46 +0100 Original-Received: from localhost ([127.0.0.1] helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1HEPPG-0003jr-7Z for ged-emacs-devel@m.gmane.org; Tue, 06 Feb 2007 07:26:42 -0500 Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1HEPP5-0003hX-2p for emacs-devel@gnu.org; Tue, 06 Feb 2007 07:26:31 -0500 Original-Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1HEPP3-0003gc-G5 for emacs-devel@gnu.org; Tue, 06 Feb 2007 07:26:30 -0500 Original-Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1HEPP3-0003gR-0L for emacs-devel@gnu.org; Tue, 06 Feb 2007 07:26:29 -0500 Original-Received: from pfepa.post.tele.dk ([195.41.46.235]) by monty-python.gnu.org with esmtp (Exim 4.52) id 1HEPP1-0006Py-53; Tue, 06 Feb 2007 07:26:27 -0500 Original-Received: from kfs-l.imdomain.dk.cua.dk (unknown [80.165.4.124]) by pfepa.post.tele.dk (Postfix) with SMTP id 9F604FAC0AC; Tue, 6 Feb 2007 13:26:10 +0100 (CET) In-Reply-To: (Richard Stallman's message of "Mon\, 05 Feb 2007 19\:16\:37 -0500") User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.0.93 (gnu/linux) X-detected-kernel: Linux 2.6, seldom 2.4 (older, 4) X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:66015 Archived-At: Richard Stallman writes: > In contrast, if someone sends me a JPEG image in an email, Gnus > will happily show it to me without asking (at least with the > settings I'm using). So where's the protection in that case? > > Should we consider that a bug in Gnus? > (I don't know what the answer is.) The answer is NO. It is normal behaviour for that sort of programs. It simply illustrates that programs which are used to display a LOT of UNKNOWN images from UNTRUSTED sources don't "care" at all about security of the image libraries. So IMO, there seem to be very little reason for Emacs to go through hoops to enforce security for a FEW, usually well-KNOWN images (or files) from (typically) TRUSTED sources (such as your own PC or digital cameras). -- Kim F. Storm http://www.cua.dk