From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 110F8139694 for ; Sun, 12 Mar 2017 02:01:57 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 1ADCEE0D0E; Sun, 12 Mar 2017 02:01:48 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id C3E12E0C14 for ; Sun, 12 Mar 2017 02:01:47 +0000 (UTC) Received: from katipo2.lan (unknown [IPv6:2406:e001:1:d01:de0e:a1ff:fea1:6ec4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) (Authenticated sender: kentnl) by smtp.gentoo.org (Postfix) with ESMTPSA id E8FFE340A23 for ; Sun, 12 Mar 2017 02:01:45 +0000 (UTC) Date: Sun, 12 Mar 2017 15:00:40 +1300 From: Kent Fredric To: gentoo-dev@lists.gentoo.org Subject: Re: [gentoo-dev] [patch] golang-vcs-snapshot.eclass: add vendoring of external dependencies Message-ID: <20170312150040.7d0015f6@katipo2.lan> In-Reply-To: References: <20170309175848.GA1621@whubbs1.gaikai.biz> Organization: Gentoo X-Mailer: Claws Mail 3.14.1 (GTK+ 2.24.31; x86_64-pc-linux-gnu) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; boundary="Sig_/yDtVdeoOiFlG9BjlIjR0mrr"; protocol="application/pgp-signature" X-Archives-Salt: d25d8326-93b1-464c-b757-3e74d0350378 X-Archives-Hash: d255aea88be473e1b28995004fdaaebf --Sig_/yDtVdeoOiFlG9BjlIjR0mrr Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable On Thu, 09 Mar 2017 18:16:51 -0500 "William L. Thomson Jr." wrote: > That would likely be an incorrect ebuild and should not have been committ= ed to=20 > tree. If people didn't accidentally overlook problems where variables contained t= he wrong contents and tried to access files they shouldn't, we wouldn't have a need = for Gentoo Maintainers. More over, we wouldn't need a lot of security we have these days, and PHP f= eatures like register_globals would have never been considered a bad thing. But the reality is, sometimes you write bugs in your code where you're not = looking at it carefully enough. Sometimes said bugs sneak through code review, tests, and about 100 people = installing it without issue. Hence a defensive approach of "Look, I don't think I've done anything reall= y bad here, but just in case reality starts bending in on itself, lets put in some sensible BANG points = to catch that". You're not going to remember every time you aught to put such BANG points i= n place, but the hope is that having *2* mental toolkits: "Don't make mistakes" and "Put things in = place to go bang when I make mistakes", With a bit of luck, both won't fail a the same time. But that's just me I guess. || die "Error sending clear message by email"=20 --Sig_/yDtVdeoOiFlG9BjlIjR0mrr Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEPZazbI/qrFT1o9rn6FQySxNmqCAFAljEq9QACgkQ6FQySxNm qCAjqw//fjEweMBaOMonHndJ8u3yPBeL9dbA40ScFq2RxrcnFUA7y7DgAUHw7eF4 skBRvVLhWdvq22MfJ2A4v2KZcPObpBLW3TuIc+5eWm7koWgZo6Zz8j3KIPbJaoTM qfLIt7vNDmqo+ySsX8MlP8oDTnH2DWuguMJNeDfYhEpOlGw/KvmUvWs3dKZbNhKC IFDhtst6ueY/ZWceLb8yt2v+Dhxuv9M/z95GrVCSruROk7JXawjDVXwPvpX+K4kN Wr5a8D3v4STHxx4yiqPG2znmt57XZhMfmNU2oqGQivHlNPLJuljnr0S8Guc2Z8zS 0vbVdeiFsU+QIFmuBGdqSiyI9PIvew3FpTlH7Q398EbxRjEIP46PCN7akpt3znVu rJhobxHVwmv5MgQ7W1uEpzzUYk5kAH6wdfCbG+Fm1JifZ5oQ0epjlF5Kz0r0t/G5 7HKKVgUSEuR4Ix40DalJHV755D6h/d/h2j+Z4YxE1AbajB0Zi+LD6NzTZWE16DJg NsCDz/iQ7QGQn8J45kD2JSfCKVzE/DB4Ay1nHDu24zyoy99omCo2vghBEFQGg81U 3QqvZ0aRJ9Oh9WbNq/5KDGz+7T7Hcsz02KPWBhSsdGPHtLYEAt0TFB3AorDlu0jr ySc0HcyITYU64EUDfD3UO/nx7oB+05hQukl+u3/3Zg3JYA4Ibyo= =t7ST -----END PGP SIGNATURE----- --Sig_/yDtVdeoOiFlG9BjlIjR0mrr--