Re: Security advisory: uw-imap - 3 attachments

2005-10-14 Thread Eric Blake
> >But so is cygwin-patches, and gmane *can* post to cygwin-patches!
> 
> 1) I didn't know that.
> 
> 2) cygwin-patches hasn't (yet) been abused by people who send off-topic
> email.  If it is abused, then I'll request similar blocking from gmane.
> 
> >gmane requires a legitimate email address before posting, and
> >therefore gmane will not allow an unsubscribe user to post to
> >a moderated list.

gmane requests an address PER list (in other words, registering
to post to gmain.comp.accessibility.vision does not also let you
post to cygwin-apps).  It also asks for your email address, so
on a managed list, your post should only get through if your
email address is already a subscriber to that list.  Therefore,
using gmane to post to cygwin-patches only works if you are
already a subscriber of cygwin-patches.  That was all I was
asking for cygwin-apps, but I see your point of view, and will
live with it, without any further comments on this thread.

> 
> I requested the one-way aspect of this gmane forum and would have taken
> more draconian steps on sourceware.org if this option wasn't available.

--
Eric Blake




Re: Security advisory: uw-imap - 3 attachments

2005-10-14 Thread Christopher Faylor
On Fri, Oct 14, 2005 at 03:32:44PM +, Eric Blake wrote:
>cgf wrote:
>>cygwin-apps is a...  wait for it...  mailing list.  It is a *moderated*
>>mailing list.  It is moderated for a reason.  Having it moderated for
>>email and not moderated for anyone who figured out how to use gmane has
>>already been shown to be a bad idea.  I don't want a back door method
>>for people to send their bug reports and package requests to this list.
>
>But so is cygwin-patches, and gmane *can* post to cygwin-patches!

1) I didn't know that.

2) cygwin-patches hasn't (yet) been abused by people who send off-topic
email.  If it is abused, then I'll request similar blocking from gmane.

>gmane requires a legitimate email address before posting, and
>therefore gmane will not allow an unsubscribe user to post to
>a moderated list.

A person who registered via gmane to read
gmane.comp.accessibility.vision does not automatically qualify as a
person who should be able to send email to cygwin-apps.

>The difference is whether gmane is set up as a one-way list (as is
>cygwin-apps) or a moderated list (as is cygwin-patches).  All I was
>asking is that gmane be told that cygwin-apps can be treated like
>cygwin-patches, instead of a one-way list.  But I can also live with
>the status quo, there is no need to do this just because I asked if you
>don't want to.

I requested the one-way aspect of this gmane forum and would have taken
more draconian steps on sourceware.org if this option wasn't available.

cgf


Re: Security advisory: uw-imap - 3 attachments

2005-10-14 Thread Eric Blake
> 
> cygwin-apps is a...  wait for it...  mailing list.  It is a *moderated*
> mailing list.  It is moderated for a reason.  Having it moderated for
> email and not moderated for anyone who figured out how to use gmane has
> already been shown to be a bad idea.  I don't want a back door method
> for people to send their bug reports and package requests to this list.

But so is cygwin-patches, and gmane *can* post to cygwin-patches!

gmane requires a legitimate email address before posting, and
therefore gmane will not allow an unsubscribe user to post to
a moderated list.  The difference is whether gmane is set up as
a one-way list (as is cygwin-apps) or a moderated list (as is
cygwin-patches).  All I was asking is that gmane be told that
cygwin-apps can be treated like cygwin-patches, instead of
a one-way list.  But I can also live with the status quo, there
is no need to do this just because I asked if you don't want to.

--
Eric Blake




Re: Security advisory: uw-imap - 3 attachments

2005-10-14 Thread Christopher Faylor
On Fri, Oct 14, 2005 at 07:34:41AM -0600, Eric Blake wrote:
>According to Christian Weinberger on 10/14/2005 12:26 AM:
>>I could not post to the cygwin applications list via gmane, so I reply
>>to the main list.  Apologies if this not the way it should be done.
>
>I don't know why cygwin-apps is registered as a one-way only list on
>gmane, but I have also found it is annoying that you can't post there
>through gmane.

cygwin-apps is a...  wait for it...  mailing list.  It is a *moderated*
mailing list.  It is moderated for a reason.  Having it moderated for
email and not moderated for anyone who figured out how to use gmane has
already been shown to be a bad idea.  I don't want a back door method
for people to send their bug reports and package requests to this list.

cgf


Re: Security advisory: uw-imap - 3 attachments

2005-10-14 Thread Eric Blake
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

According to Christian Weinberger on 10/14/2005 12:26 AM:
> I could not post to the cygwin applications list via gmane, so I reply
> to the main list. Apologies if this not the way it should be done. 

I don't know why cygwin-apps is registered as a one-way only list on
gmane, but I have also found it is annoying that you can't post there
through gmane.  It would take permission from the list owner for gmane to
change the policy on their mirroring of the list (at least gmane still
respects the subscriber-only posting rules).  However, gmane also has the
annoying property of not allowing file attachments, so you really should
be using a proper email client and not gmane when trying to send attachments.

As for you comments about cygwin applications, they really do belong on
cygwin-apps; I've changed the reply-to accordingly.  Also, attachments are
better received if they are MIME attachments, not uuencoded inline; and
with a text MIME type if they really are text based (the number of mail
clients out there that blindly assume every attachment should be marked
application/octet-stream is unfortunate).

> 
> I´d be glad to assist the maintainer in building a 2004g package for
> cygwin. 

There has been no response from the uw-imap maintainer, at least per
http://sources.redhat.com/ml/cygwin-apps/2005-10/msg00111.html.  If you
are volunteering to maintain it, you will need to respond directly on the
cygwin-apps list.

- --
Life is short - so eat dessert first!

Eric Blake [EMAIL PROTECTED]
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (Cygwin)
Comment: Public key at home.comcast.net/~ericblake/eblake.gpg
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDT7Px84KuGfSFAYARAsZZAKCQv5IVM86s4JG4E/hy31UqsnLc0gCbBjvV
AaOfRhh14DlGRrgHIOR6XYs=
=FgOe
-END PGP SIGNATURE-