From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 84A3D158041 for ; Mon, 1 Apr 2024 07:57:14 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 5AA8DE2A14; Mon, 1 Apr 2024 07:57:09 +0000 (UTC) Received: from james.steelbluetech.co.uk (james.steelbluetech.co.uk [78.40.151.100]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 005D6E2A0B for ; Mon, 1 Apr 2024 07:57:08 +0000 (UTC) Received: from ukinbox.ecrypt.net (hq2.ehuk.net [10.0.10.2]) by james.steelbluetech.co.uk (Postfix) with ESMTP id 0C290BFC18 for ; Mon, 1 Apr 2024 08:57:07 +0100 (BST) DKIM-Filter: OpenDKIM Filter v2.10.3 james.steelbluetech.co.uk 0C290BFC18 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ehuk.net; s=default; t=1711958227; bh=ZmDs4jaBApyksFJPJyrpM5NoyvSNYmOB7nSbQfDfZ+Q=; h=In-Reply-To:References:Date:Subject:From:To:Reply-To:From; b=SFI+0kPsRLEWHRL5SETCARQWCgszsIbcOdtuc7+H4/VEtviWZgW6GWJaziUilVmV+ OMoBJ2KaJ4RvKTKYSuHvMUfZXk04QsWExQfDXLTeQbLdAqEDHGH7hLBjwdiWV1L5Pj MlTM4nXxqlpuRLCeuPV0P4PeBS/GdcpXOXNVqoVDW2PDEaewjW9JkCYcRMIa7BAGef iBr04OJiPTWNrJgLD/Gk9N2LNiciHqeOQlZ1iLzMs9MeRZ/bHmxpugn2St13OomPJ8 I+Ek18j7ur/QAMG9KhfsEA8U+FC0qY0Cxwga9UXIaRNcbVbIp7/8H6bgyCHaIa0H7b HG5fogyUOKN1Q== Message-ID: In-Reply-To: <87c8b82b-0d72-4f4c-aacc-04412b3a5d77@gentoo.org> References: <42575b278b15f667e08084b83de0d7af.squirrel@ukinbox.ecrypt.net> <87c8b82b-0d72-4f4c-aacc-04412b3a5d77@gentoo.org> Date: Mon, 1 Apr 2024 08:57:07 +0100 Subject: Re: [gentoo-dev] Current unavoidable use of xz utils in Gentoo From: "Eddie Chapman" To: gentoo-dev@lists.gentoo.org User-Agent: SquirrelMail/1.5.2 [SVN] Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 Content-Type: text/plain;charset=utf-8 Content-Transfer-Encoding: 8bit X-Scanned-By: MIMEDefang X-Archives-Salt: 64de5d34-abf9-4633-a086-18ea89568417 X-Archives-Hash: 74e6d385747dd701d8bedb85b3e7f16e Matt Jolly wrote: > Hi Eddie, > > On 31/3/24 21:13, Eddie Chapman wrote: > >> At the moment there is far too much of >> a cavalier attitude about the whole thing being shown by too many, >> including here I'm sad to see. > > It's obvious that this is something that you are very worried about, but > I think that you need to take a deep breath and relax a little. I have > not seen a cavalier attitude towards this issue. No, I don't need to do that. I don't appreciate suggestions to "just calm down", especially when I'm not being hysterical. Your comment to me just reinforces what I mean when I say there is far too much of a cavalier attitude. > What I see instead are developers who have made an initial assessment > and disclosure, have taken some actions to mitigate the severity of the > issue, and are carefully continuing their investigations (over a major > holiday in large parts of the world) so that they can issue sane responses > to actual threats, and not a knee-jerk response like 'Gentoo should > re-encode all xzs in other formats' which, as was discussed above, adds > significant complexity for no real benefit. I stand by and reiterate my view that there is far too much of a cavalier attitude towards the matter in general out there including here in Gentoo. But not in particular here, it is everywhere where this is being discussed at the moment. But please think a little about what I mean when I say a "cavalier attitude", and what it does NOT mean. It does not mean that a lot of people are not working very hard to analyse and learn about this issue and taking steps to try to mitigate it. It does not mean people are not well intentioned, everyone wants to fix this. I have great appreciation and admiration for a lot of fantastic work I see going on including by people involved in Gentoo. But I believe it will only really be beneficial in the far future, not right now. How are people in general being cavalier? By trying desperately to salvage the situation with xz-utils above all else, by focussing too much on how the original author of xz-utils and rallying round them (absolutely a great thing to do but has absolutely nothing to do with what is good or not good for users as a whole right now), there is too much clouded judgment. There is more I could argue about why I use that word, but I know by now that I am going against the grain of what the majority want and it's not what people want to hear so I'm done, this discussion is now a waste of everyone's time here including mine. > I've seen from your previous emails to the list that you know what > paragraphs are and how to use them to break up your content into digestible > chunks. Please continue using them - it makes it significantly easier to > respond to your ideas and gives off an aura of professionalism that you > will need if you want your concerns to be taken seriously and addressed > directly. Yes you are right, I do apologise for not using paragraphs in my last message, I slipped there, thanks for pointing it out. I've tried to do so in this message. > Cheers, > > Matt And I should make more of an effort to sign off, it's a little more friendly :-) Regards, Eddie