From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id 8ApcEh81vl8vTwAA0tVLHw (envelope-from ) for ; Wed, 25 Nov 2020 10:42:39 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id INA9Dh81vl+lFwAA1q6Kng (envelope-from ) for ; Wed, 25 Nov 2020 10:42:39 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id BF81C9402A7 for ; Wed, 25 Nov 2020 10:42:38 +0000 (UTC) Received: from localhost ([::1]:60036 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1khsFx-0000OT-Mc for larch@yhetil.org; Wed, 25 Nov 2020 05:42:37 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:51000) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1khsFQ-0000ON-DY for emacs-orgmode@gnu.org; Wed, 25 Nov 2020 05:42:04 -0500 Received: from mail.tuxteam.de ([5.199.139.25]:55458) by eggs.gnu.org with esmtps (TLS1.2:DHE_RSA_AES_128_CBC_SHA1:128) (Exim 4.90_1) (envelope-from ) id 1khsFN-0007mU-FL for emacs-orgmode@gnu.org; Wed, 25 Nov 2020 05:42:04 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=tuxteam.de; s=mail; h=In-Reply-To:Content-Type:MIME-Version:References:Message-ID:Subject:Cc:To:From:Date; bh=cPX2+NAiJDhGfPnPlGsCjp2CdA2VhAhQsu8YCpz6rJY=; b=LLZsPjzF0MsPesEmAy/KF7WnhSDXtjm0QwRVy/NSNdn9xUQctkY/D+kd5/ghu1swE5SVZfPuzj91O3hYaYKcZ57N43lXG/RGNMdACHWvQfKE8VfZQym0R2KQ/XhVIobXIZtpZjGs/+7z2IyeUFG98RvL3gIsCK8oFAyjtfpvLGHnJJnCIqCzzd20YR3HXF2+S6DsHFkmBEvQcXHawl38BkHLLBCce161d/WYfCo/Kprwza9M5r5mcc+qaQKts9MoqMDGflTddnWXtXIMpR2O67xX3j9d9V1Nz23dQ+lpOwnVBpNsPWtrQmZMXjz+xIvxl2vMG+0vVg4oZxxPeSysEQ==; Received: from tomas by mail.tuxteam.de with local (Exim 4.80) (envelope-from ) id 1khsFF-0006PG-Fi; Wed, 25 Nov 2020 11:41:53 +0100 Date: Wed, 25 Nov 2020 11:41:53 +0100 From: tomas@tuxteam.de To: Jean Louis Subject: Re: Security issues in Emacs packages Message-ID: <20201125104153.GD16290@tuxteam.de> References: <87zh36d1xn.fsf@web.de> <875z5uxzev.fsf@gmail.com> <87v9dt7wfa.fsf@gmail.com> <20201125090712.GC16290@tuxteam.de> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="u65IjBhB3TIa72Vp" Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.21 (2010-09-15) Received-SPF: pass client-ip=5.199.139.25; envelope-from=tomas@tuxteam.de; helo=mail.tuxteam.de X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-orgmode@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "General discussions about Org-mode." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: emacs-orgmode@gnu.org Errors-To: emacs-orgmode-bounces+larch=yhetil.org@gnu.org Sender: "Emacs-orgmode" X-Scanner: ns3122888.ip-94-23-21.eu Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=tuxteam.de header.s=mail header.b=LLZsPjzF; dmarc=none; spf=pass (aspmx1.migadu.com: domain of emacs-orgmode-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=emacs-orgmode-bounces@gnu.org X-Spam-Score: -3.31 X-TUID: ZmCocISWrwZ3 --u65IjBhB3TIa72Vp Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Nov 25, 2020 at 12:26:11PM +0300, Jean Louis wrote: > * tomas@tuxteam.de [2020-11-25 12:08]: > > On Wed, Nov 25, 2020 at 11:23:27AM +0300, Jean Louis wrote: > >=20 > > [...] > >=20 > > > [...] and not from Chinese distributor [...] > >=20 > > I think this was an unnecessary slur. >=20 > Why, there is legitimate mirror in China. >=20 > I did not mean nothing wrong with it. I hope nobody gets offended. I'm not. I don't assume (even suspect) bad intention at all. And I don't want to make a state affair of it. I just wanted to mirror the metaphor you used ("Chinese distributor" as "untrusted instance") which seems somewhat problematic. We all do this, myself not the least. I'm happy whenever someone points that out to me. That's all :-) Cheers - t --u65IjBhB3TIa72Vp Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iEYEARECAAYFAl++NPEACgkQBcgs9XrR2kZQMQCeMwouVTbFk7VfcVgPEgHSWfUi sxwAn2XUFVyk5AiNaG51ijrmdP/HUhxi =FioR -----END PGP SIGNATURE----- --u65IjBhB3TIa72Vp--