Hi John and list. > My theory: A user created a valid Vim script [... ] later [ .. wants > to delete his profile and stuff .. ] If this is true the author still exists. The email did not get delivered. So can we find a way to contact the original author? Then we can stop talking about *security* and whether this is a security issue or not.
user name sttillmann first name Sebastian-Torsten last name Tillmann email [email protected] (does no longer exist) homepage http://sebastian-tillmann.de Does anybody know how to contact him? > A likely reaction is what happened with script 1670, namely, the Can't you delete all files without uploading a jpg? > Bram alerted me to 1670 (probably someone told him). At least two to three people got alerted (ZyX noticed it because he reviews VAM-kr (kudos to him) - he told me. Bram was told .. That we catch these things that fast makes me proud being part of this community! Even though some parts of the homepage are old - still lot's of people do care a lot. > I have around ten other old scripts to delete: a couple that > Charles Campbell has withdrawn (due to an attack on the script > ratings that we discussed a while back), and some old junk which > looks harmless but is not related to Vim (some of which is > definitely old spam). I feel bad about Charles Campbell - I think he contributed lot's of valuable scripts in the past. Going away from www.vim.org just means dropping value of www.vim.org. Thanks that you reminded about that huge issue. And honestly I think that we have the situation that doing nothing harms more than doing anything. Marc Weber -- You received this message from the "vim_use" maillist. Do not top-post! Type your reply below the text you are replying to. For more information, visit http://www.vim.org/maillist.php
