From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from foss.arm.com (foss.arm.com [217.140.110.172]) by sourceware.org (Postfix) with ESMTP id D429D388A004 for ; Thu, 2 Apr 2020 09:48:26 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org D429D388A004 Received: from usa-sjc-imap-foss1.foss.arm.com (unknown [10.121.207.14]) by usa-sjc-mx-foss1.foss.arm.com (Postfix) with ESMTP id 80D2E31B; Thu, 2 Apr 2020 02:48:26 -0700 (PDT) Received: from localhost (e121540-lin.manchester.arm.com [10.32.98.126]) by usa-sjc-imap-foss1.foss.arm.com (Postfix) with ESMTPSA id AC3EC3F71E; Thu, 2 Apr 2020 02:48:25 -0700 (PDT) From: Richard Sandiford To: Bernd Edlinger Mail-Followup-To: Bernd Edlinger , Arseny Solokha , Jonathan Wakely , "gcc\@gcc.gnu.org" , overseers@sourceware.org, richard.sandiford@arm.com Cc: Arseny Solokha , Jonathan Wakely , "gcc\@gcc.gnu.org" , overseers@sourceware.org Subject: Re: Can we please have the old mailing list back References: <23b63bb3-9156-5a28-30b0-8fe557b33df1@gmx.com> <20200325185527.GB8416@cgf.cx> <20200326151602.GA8097@cgf.cx> Date: Thu, 02 Apr 2020 10:48:24 +0100 In-Reply-To: (Bernd Edlinger's message of "Thu, 2 Apr 2020 11:33:49 +0200") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Status: No, score=-18.3 required=5.0 tests=BAYES_00, GIT_PATCH_2, KAM_DMARC_STATUS, KAM_SHORT, SPF_HELO_NONE, SPF_PASS, TXREP autolearn=ham autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on server2.sourceware.org X-BeenThere: overseers@sourceware.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Overseers mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2020 09:48:28 -0000 Bernd Edlinger writes: > On 4/2/20 11:01 AM, Richard Sandiford wrote: >> Bernd Edlinger writes: >>> On 4/1/20 8:51 AM, Bernd Edlinger wrote: >>>> On 3/26/20 4:27 PM, Bernd Edlinger wrote: >>>>> On 3/26/20 4:16 PM, Christopher Faylor wrote: >>>>>> >>>>>> marc.info is an independent site that is not associated with >>>>>> sourceware.org. We don't control it. If you have questions about their >>>>>> site then ask them. >>>>>> >>>>>> The mailing list software is all easily discernible by investigating >>>>>> email headers and via google but someone else answered your questions >>>>>> later in this thread. >>>>>> >>>>> >>>>> But don't you think that we change something in 6.3 to make them break. >>>>> like no longer sending updates, or something? >>>>> >>>>> Don't you have any idea what changed on our side? >>>>> >>>>> I mean what should I tell them they should do to fix that????? >>>>> >>>>> >>>> >>>> Ah, marc.info is fixed, it turned out that the messages were just Quarantined >>>> because due to the change in the ip adresses, mailing software etc. >>>> marc.info was under the impression that all these messages were just spam. >>>> >>>> That is what they told me: >>>> >>>> "For lists that often get spammed, we set up some silent header-checks >>>> so that mails that don't look like they came from the real listserver >>>> get quarrantined, and don't appear when viewing that list. >>>> >>>> Well, that can break when mailing list software changes - like when they >>>> switched away from ezmlm to Mailman. >>>> >>>> I've updated our filter check and un-quarrantined about 4500 mails to >>>> various gcc- lists that landed there this month." >>>> >>>> So indeed all our mailing list message are again on marc.info, >>>> I think when it can handle lkml it can handle gcc-patches as well. >>>> >>>> Many Thanks go to Hank Leininger who does a gread job with marc.info. >>>> >>>> >>>> Bernd. >>>> >>> >>> PS: I have a discovered a very serious problem with the mailing lists >>> that must be fixed by our overseers. >>> >>> That is the scubbed attachments. >>> >>> As an example please look at this one: >>> https://marc.info/?l=gdb-patches&m=158571308379946&w=2 >>> >>> >>> you see this: >>> >>> -------------- next part -------------- >>> A non-text attachment was scrubbed... >>> Name: 0001-Fix-range-end-handling-of-inlined-subroutines.patch >>> Type: text/x-patch >>> Size: 10992 bytes >>> Desc: not available >>> URL: >>> >>> So there are two serious problems here: >>> >>> 1. there is a single point of failure, if sourceware.org goes down the attachment is lost. >>> >>> 2. since the url is http: a man in the middle can impersonate sourceware.org and give you a >>> virus instead of my patch file. >>> It does not help that sourceware.org redirects the download to https://sourceware.org/pipermail/gdb-patches/attachments/20200313/5158bb87/attachment.bin >>> an attacker will not be so polite to do that. >>> >>> >>> @overseeers: PLEASE STOP IMMEDIATELY THAT SCRUBBING >>> >>> can you act now, or do you need a CVE number first ? >> >> The overseers are reachable on: >> >> https://sourceware.org/mailman/listinfo/overseers >> >> Please keep the tone civil. I hope we never see the day where the GCC/ >> sourceware lists have to have a code of conduct, but if we did, I think >> some of the messages on this thread would have breached it. >> >> Thanks, >> Richard >> > Thanks, for reminding me. > > I do personally full-heatedly apologize, and regret what I said above. > > I am sorry if I made you feel bad. That was not the true intention of what > I said. > > > I asked Hank Leininger for clarification how mark.info subscribes the mails, > and what data he gets exactly from us. > > I am still waiting for his response, and let you know what he says. > > In the meantime, culd you please change http: to https: Just in case: I'm not actually an overseer myself, but I can see how my message could give that impression. I think the request would be better sent to the overseers list, if you haven't already Sorry for the confusion :-) Richard