From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 25192 invoked by alias); 16 Jul 2018 16:40:27 -0000 Mailing-List: contact cygwin-apps-help@cygwin.com; run by ezmlm Precedence: bulk Sender: cygwin-apps-owner@cygwin.com List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Mail-Followup-To: cygwin-apps@cygwin.com Received: (qmail 25181 invoked by uid 89); 16 Jul 2018 16:40:27 -0000 Authentication-Results: sourceware.org; auth=none X-Spam-SWARE-Status: No, score=-1.4 required=5.0 tests=AWL,BAYES_00,FREEMAIL_FROM,KAM_NUMSUBJECT,RCVD_IN_DNSWL_NONE,SPF_PASS autolearn=no version=3.3.2 spammy=pose, habits, sit, HContent-Transfer-Encoding:8bit X-HELO: mail-it0-f41.google.com Received: from mail-it0-f41.google.com (HELO mail-it0-f41.google.com) (209.85.214.41) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Mon, 16 Jul 2018 16:40:25 +0000 Received: by mail-it0-f41.google.com with SMTP id s7-v6so21772908itb.4 for ; Mon, 16 Jul 2018 09:40:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:openpgp:autocrypt:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=4EA0uAOpK5kRo8OSpzIj3NIVuK7WzwQ6C+L8qZl+UD8=; b=AUOzdCiSWlRDfFopc1nwlUhneIz3oxLcR9KQn3zHViV3da7nrlYxdSsK1vT8uGQWsA KwQQkz0KPx6X+ekzA73duY9gvc+lkq/V9gzfu8gJtphRxFq/w4EEsdwPW/ZQEeBaqzhj okg58DacOYsp8FPvWifj5pDK4RL7N41c2IuN/173rEJHPaPYDbgUZEM/DoqKbYzymHqU kkbm36AkhLCCaUDG3wj8+buv37eohRN4fI8Q6gE32v9dOOJycCwytC7OAVRlGam2ybl6 1UlsS6gI64fArPQ3r5oSE+e4vjJEYkqjiRs0nvkO7+jZHPH2qQM7c/vdzXgcIGYlRQy8 PMUg== Return-Path: Received: from [192.168.0.3] ([69.47.131.109]) by smtp.gmail.com with ESMTPSA id q1-v6sm768916iod.16.2018.07.16.09.40.22 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 16 Jul 2018 09:40:23 -0700 (PDT) Subject: Re: [ITA] rsh-0.17-3 To: cygwin-apps@cygwin.com References: <20180716045535.af47b237719e6c55cd55a9f3@nifty.ne.jp> <87lgabshnb.fsf@Rainer.invalid> <20180716174907.6de89a81b55e404dc62a4e18@nifty.ne.jp> <87h8kzsgbv.fsf@Rainer.invalid> <20180716091644.GB7249@calimero.vinschen.de> <20180716093257.GC7249@calimero.vinschen.de> <20180717010613.0cc8eb0fd4b34b197bab74d9@nifty.ne.jp> From: cyg Simple Openpgp: preference=signencrypt Message-ID: Date: Mon, 16 Jul 2018 16:40:00 -0000 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <20180717010613.0cc8eb0fd4b34b197bab74d9@nifty.ne.jp> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-IsSubscribed: yes X-SW-Source: 2018-07/txt/msg00053.txt.bz2 On 7/16/2018 12:06 PM, Takashi Yano wrote: > On Mon, 16 Jul 2018 09:54:02 -0400 > cyg Simple wrote: >> On 7/16/2018 5:32 AM, Corinna Vinschen wrote: >>> As a compromise, we could continue to provide the client package and >>> just discontinue the server package, but it's your choice. >> >> What use would there be even for the client? Even in my home mode >> connecting to BlueHost or any other such service I need ssh to connect >> to my server. > > The existence of the rsh package itself does not pose a vulnerability > to cygwin. People who do not need rsh package do not have to install it. > > Should not it leaves on users to decide whether to install or not? > I think that it is better for users to have a choice. > Not when the number of users is less than the requirements to keep the resource. You package it, upload it to Cygwin servers and then it is copied to many servers as a mirror for it to sit and not be used. It doesn't sit well for Cygwin to waste such resources for software technology that has been dying for decades. Remove it and let the masses change their habits. I know it's a pain as I've experienced the removal of rsh access when I was working but changes were made and we adapted to the change. -- cyg Simple