Re: supercite.el: sc-get-address/sc-attribs-extract-namestring

David> All good reasons. My suggestion was a mild one that I David> thought might _eventually_ make it easier for people to see David> what packages XEmacs has available and what levels they are David> at. Right. I've been in a bad mood lately, my intent was not entirely nice, and I'm sorry about that. But I really do want people to understand what kind of process is going on here (not least, the developers themselves!!) I hope that will encourage both better bug reports and suggestions, and participation by people who can see a niche in the process where they can contribute without unwarranted sacrifice of time. David> The "synopsys" address is my work address and I wouldn't David> want something like this going through there. Exactly! ;-) David> I may be a 20 year programmer of Unix, but I feel like a David> novice when it comes to making a system visible on the David> Internet and keeping it safe from spammers and crackers. connection, (2) cvs to cvs.xemacs.org, and (3) the ability to ssh out to cvs.xemacs.org and perhaps ftp.xemacs.org. (4) rsync to cvs.xemacs.org is an optional optimization. Working on documentation, you probably should allow (5) outgoing connections to www.xemacs.org. You can shut down everything else. (Maybe including (2) CVS, I forget whether commit privilege in a subrepository implies read everywhere via:ext over ssh.) David> I feel, though, that it's better to get it (close to) right David> the first time than secure it later. Definitely. A word of advice: you shouldn't count on being able to shut crackers out completely. Make sure you have an early warning system checking logs etc for unusual activity, as well as locking the door. -- Institute of Policy and Planning Sciences http://turnbull.sk.tsukuba.ac.jp University of Tsukuba Tennodai 1-1-1 Tsukuba 305-8573 JAPAN Ask not how you can "do" free software business; ask what your business can "do for" free software.