On 09/05/2013 07:22 AM, Ed Willink wrote:
Hi
Nice idea, but isn't the extension point a perfect target for hostile
attacks?
In an extensible framework such as Eclipse, any additional plugin can
contain malicious code. This proposed extension point is no more and no
less dangerous than any
On 2013-09-05 1:22 AM, Ed Willink wrote:
Hi
Nice idea, but isn't the extension point a perfect target for hostile
attacks?
I am not a security expert, but I think active eclipse installation
count report will be very low on your priority list if an attacker was
able to penetrate your system
On 2013-09-05 4:00 AM, Markus Alexander Kuppe wrote:
On 09/05/2013 02:14 AM, Igor Fedorenko wrote:
* There will be workspace preference to enable the counting, it will be
on by default.
Does this mean that the plug-in collects statistics even if the user
does not opt-in to send stats?
No,
If the user initiates an install operation with full understanding
that they are contacting an Eclipse Foundation server to download
some artefact, then it is perfectly reasonable (in my opinion) for
them to expect that we're keeping track of the fact that that thing
has
It sounds like p2 sending stats may need to change depending on the
final form of the policy.
As I recall, in our private exchange I just said "no" and that we'd
have to wait until the policy was developed.
There is a link to the work-in-progress policy on the
On 2013-09-05 11:42 AM, Wayne Beaton wrote:
If the user initiates an install operation with full understanding that
they are contacting an Eclipse Foundation server to download some
artefact, then it is perfectly reasonable (in my opinion) for them to
expect that we're keeping track of the
To be clear, I am proposing central place to provide opt-in/opt-out
configuration for all heartbeat and other call home functionality at
Platform level. We won't be able to enforce this automatically, but I
assume that any plugin that wants/needs to do any call home would honour
the Platform
If it's a few months, it'll be too late to make any changes for Luna,
which will be very unfortunate.
--
Regards,
Igor
On 2013-09-05 1:24 PM, Wayne Beaton wrote:
This has legal and privacy implications, and may need a Board review as
well. It will not be completed for at least weeks, if not a
Hi Igor,
This sounds very interesting !
Several companies / plugins do this already with their own methods (I remember
Max Andersen's EclipseCon talk about JBoss tools [1], Pydev and Subclipse also
do it from what I remember). I really like the idea of providing common
infrastructure under
Thank you for the feedback, Martin. Apparently we can't do this at
eclipse.org presently. So I'll wait for the Board to make their decision
before I spend any of my time of this.
--
Regards,
Igor
On 2013-09-05 6:54 PM, Oberhuber, Martin wrote:
Hi Igor,
This sounds very interesting !
Several
10 matches
Mail list logo
