From nobody Sat Mar 16 15:58:58 2024 X-Original-To: freebsd-ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Txm5M6ZSJz5F4Qh for ; Sat, 16 Mar 2024 15:59:19 +0000 (UTC) (envelope-from marklmi@yahoo.com) Received: from sonic311-24.consmr.mail.gq1.yahoo.com (sonic311-24.consmr.mail.gq1.yahoo.com [98.137.65.205]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4Txm5L3L6dz4MJc for ; Sat, 16 Mar 2024 15:59:18 +0000 (UTC) (envelope-from marklmi@yahoo.com) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=yahoo.com header.s=s2048 header.b=drhTef6B; dmarc=pass (policy=reject) header.from=yahoo.com; spf=pass (mx1.freebsd.org: domain of marklmi@yahoo.com designates 98.137.65.205 as permitted sender) smtp.mailfrom=marklmi@yahoo.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1710604755; bh=AxbnBzEj2uROIy3O1yJA8bx7YGiXKRL0hHTei73/ABs=; h=From:Subject:Date:To:References:From:Subject:Reply-To; b=drhTef6BQ2/QYKpTxbvtP1MJLYT9ODikgLhlbaNe3HnHQ5Id8D8q1WssZr2CZEd6WN4IDv2oxH352Vpm+Fj0Vt86F1IawgV8eG7qwpTxg7BKmTebfU0iEiIPr31ZDdv1R6WbghGo9UJU5TOzIVMfdbSXUbyxf7Hl2hs06ZWA/CMd6sbIBi+NudKENgGrc9shf0Fj2NtLnhWKz5iWG/77+TO/viAtxg0e7/tJivLizZq3zqSsgSw9w3gwF11IRYhbX7TJQHx3aXLCsVka+1dx3W5JZXiuz8qyiJLYv5Fo6owoEOz6f9ILhvGte1uadJyEHBUn9OXWlHXutfV8crsrOA== X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1710604755; bh=LQOMwAaYw8gARqLVG10lmlrmcRFKyRiYaf01LhWA4w4=; h=X-Sonic-MF:From:Subject:Date:To:From:Subject; b=UOWtVjkmiz/zcYZP88Ze3n8zC3x51wz/MYYG8lpJGSjLwvlOn0XOLODLCyR/8A3nf8XcuXg6epKtVbMhtZH9AY2Tz/zDinO9sZq1knOmtzZrXYHY7dZ/qzgjzUypvrYWwZtJnElsMeb3sJymMrlrN1Ip9P73t9iZ07auS2h9ALgHAaR2+pwhYHq7nRiJqKQAAgWneY2dwmVI3SNyzBn6xI5Mtuw7nvhVGL5yavy+YMRQEJhIYk7tBpSedgM8NsbKGzpxBvPyGv+xfqntLi3UDOhvy8L/7KKyi39qI8BEr+Lzs8IEG7p8bQNrvBPZMnJq+3AqrrC0b95yNe8fcnLr2g== X-YMail-OSG: ZBLRN54VM1m5XY9S_tj6zO2ggUiLEe4B3MD3zTu6HehVYdeTZD45dhKjlTxwxIg j0EJV3l4XsgJIPM7u.Hb7x.OA6T30aN1VcRXHm.Dn9TujGRCLgdW2jL9dn6pk6yBBzvprxztI.sH CRAH.HrHWwr39d_qwfUIUI7dE..W_jRX1VlNDKI7_jHL7NvLqq0F9HDIsMaieW9W_fzoFp9WKiX1 ro3HV0A3FnAHzAkmDeG8mLERE1LhcfYCUa0hDdWT6odDLY41UA6mNwp0CFbXVCib.N0mxY9T8Tc5 oBmCIoBJ60MUsGhXaYgLnHQf8uVTagBY0OYBC41zOimJEDMyQcuOiNRE3ShLg92iHKGFL4NuCyMW r.UjmobbENDj.Hj_6dCzr.T74CkGgabqxvm3Vd.AASdbOXWHG4fi_Enn5gDifo.33H2AOA.iYfW1 .qsislVnNYVeSt65yR2R3BP_IMpssl.el.JesC4FOi.ztt.CtY09vUvVXyhQ9_Qm0xmlGo3cDKEh tWOCRN9Eeflbh1KPFsW.8P0akZS.ohQDNqHU4Foqckk67mpUQt5KhMLNtFZDNWLv15ocoAtU7RT8 WooZae7ga9OPZC0vI9mgmZAdPrIyxXtPeZJujC8yQPiMlE6EoxBhLM5gPB8dXs2QWMC3ehN9Af1_ S4Honay_NdSbTctJpgwrWKfVEWO3Bz94E0sTnU5UFKEY_guypHwKYHF1ZynoT4zETNa5.2zJJkz2 gfANTGhEsC9jcS.AO5reUIE4U__i8yoWzdH184HGloWTJ_3bfovq6jFA6dNQbsmfCI63ta0elMj6 wFvMubWTcr6tITV339mPRxdz3stNgX2tB_.tQm9vw0eY.m4RJjk1B_icH6pTNi6TeztPABEXYx5J AJvhaXWeB8bIRBZOX6PScnMgQZlvzcCdd3pzdQJMa5c_TA0DxUQvFoZhaQ24EvwEt3VWIHdwixDo aQQVqxlqqB5ieRaf6fLfRZvx3LLJV7FHSpa7BbZ0Ma_FwWWE.rFy3UFY.1peVCm1_qcE8WsahVNC LLHzrhNs1Qzo2UqyLgEqAqBZx6HPPbMd9WOlWaZ.t.w0WEsA_yD3KhK2Pqwu_UqdoY_CvyBBBnas LuLQkiIqwin_bumasG3WbK8wPQvllxE4HOzAi0DVw46aqI8Tko5WEiAEg1aqbgW2TrZNZdpKJrtW CEeIMTQnMc7g1mDz8Xn6FlahvzWDX82.B4FoUHhEzdhYk.fGOynizDItBK_yWPQO2WFJHym28opE 9DHdOjBF1oBoNjw.7mH_ZjV7atyLvUcQ1Nt_tHTMtL.anGvEzUVy1zuyPu58CEADHtxKGJjFNizk ApqbGnYjbyo7oh_wOAToZgrG5kLyhyRsDG9Y_rkkVnpdHyj9K32tpPNSFqmaqSIKYwovTHfk4sLk _d2W609UfJEtQfQEaR2XEbeh0Kt6_0.TJ7kAqHskoyKW2LL0s40ySMnLAFliRKGo4pk9GJvAXbRy zpg4h_SHmxudYG20w29Seh9xHDX1vuSrxTvz_kyuRGSJF_daNHw3IOrKdlcXJtrROTQKcBz4SttP mQMU30UnZdtxdp5tLLFMA609ZCI0mh6_nZ4D0If9ssSA3nHXFXmfeFP1yuwTC5KNZ4DUrm0IN2FL dMjST.dXuQx.k9BG1vMI6au_qeyrmh_95Lnb3voE_NDhN9kvH1iusqmnPZ74oFKZssi4Os9yHADF RBfzOiPZnftQc_GoCCN6iH5cx.dNxQzcvphMxNkDhYEGjPsp4mcA5AHAnac2v1.LpH3D04_VLOkN akd9eOb5hwabHaWpg9vzMAAKwyeGfSp.QWvujCrn9_zq7y0FU3HJnO_ThW8GtseDdYOiX5c7TvSh BEClnI_JOZk1m9NP8hYKrv1kN8IbTIaH3mXdMWSm6sp9sczzSwF.GPShlXxReczji6V3NXZfgmoC _ELSoIRR0A6YUcgIcbXaalCJJdMxznqpUX8t.XofQ3rB8Cp3u3OPcdqhce7N6sE4PsoNwpTG0mgh sqK6hA.nmE7bLO.50B1qZ.Rx.slnnW4GIkwn1EQ.OLuoMAkAIqrYRkW3q37Rtosemjgxv1UkUaWJ eBu4C2iJIF7ZSR2I_pvSb5uCYh36gsf3o8l57pEDk1ev4vqraVAndbQ58NjayXA7kd0omnnsOdw1 KUCQmqkwdmvG17lt6rFx4d7NgJ9ZnX8K17bH90Gha978KjO8gOQ92n7ZlxltpgLgfu.chYvKLCt6 _jvy_uxDsIksTbkQ3XTsYiDftdoMCLSE4BbIYvcy1RKr29a7v8CKweA_C3sX07PYPabhu5ViI5C8 - X-Sonic-MF: X-Sonic-ID: dd35dab7-c3de-48bb-9b61-3bad5388a1e2 Received: from sonic.gate.mail.ne1.yahoo.com by sonic311.consmr.mail.gq1.yahoo.com with HTTP; Sat, 16 Mar 2024 15:59:15 +0000 Received: by hermes--production-gq1-5c57879fdf-llxbt (Yahoo Inc. Hermes SMTP Server) with ESMTPA ID 28d9a017c47fa7dd4a2b2f169b4f1bff; Sat, 16 Mar 2024 15:59:10 +0000 (UTC) From: Mark Millard Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3774.400.31\)) Subject: Re: Proposed ports deprecation and removal policy Message-Id: <1068734D-4D5D-4E13-AC1E-D91BBDBE0486@yahoo.com> Date: Sat, 16 Mar 2024 08:58:58 -0700 To: eugen@grosbein.net, daniel.engberg.lists@pyret.ne, FreeBSD Mailing List X-Mailer: Apple Mail (2.3774.400.31) References: <1068734D-4D5D-4E13-AC1E-D91BBDBE0486.ref@yahoo.com> X-Spamd-Bar: --- X-Spamd-Result: default: False [-3.99 / 15.00]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_SHORT(-0.99)[-0.994]; DMARC_POLICY_ALLOW(-0.50)[yahoo.com,reject]; R_DKIM_ALLOW(-0.20)[yahoo.com:s=s2048]; R_SPF_ALLOW(-0.20)[+ptr:yahoo.com]; MIME_GOOD(-0.10)[text/plain]; FROM_HAS_DN(0.00)[]; DKIM_TRACE(0.00)[yahoo.com:+]; RCVD_TLS_LAST(0.00)[]; ARC_NA(0.00)[]; TO_DN_SOME(0.00)[]; MIME_TRACE(0.00)[0:+]; FREEMAIL_ENVFROM(0.00)[yahoo.com]; FREEMAIL_FROM(0.00)[yahoo.com]; RCPT_COUNT_THREE(0.00)[3]; ASN(0.00)[asn:36647, ipnet:98.137.64.0/20, country:US]; RCVD_VIA_SMTP_AUTH(0.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_COUNT_TWO(0.00)[2]; FROM_EQ_ENVFROM(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[98.137.65.205:from]; MLMMJ_DEST(0.00)[freebsd-ports@freebsd.org]; APPLE_MAILER_COMMON(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; RWL_MAILSPIKE_POSSIBLE(0.00)[98.137.65.205:from]; DWL_DNSWL_NONE(0.00)[yahoo.com:dkim] X-Rspamd-Queue-Id: 4Txm5L3L6dz4MJc Eugene Grosbein wrote on Date: Sat, 16 Mar 2024 13:16:21 UTC : > 16.03.2024 17:03, Daniel Engberg wrote: >=20 > > A key difference is though that browsers such as Firefox or Chromium = are maintained upstream including reporting etc. >=20 > It does not stop browsers from being vulnerable all the time. All = times. So, no difference in practical point of view. > In theory, there is difference. Not in practice. My guess here is that Daniel is thinking of properties like: How long does a discovered vulnerability generally stay as a vulnerability after discovery? There might generally be a difference for code maintained by an upstream vs. code not maintained by an upstream, for example. There might be practical consequences to such distinctions in various kinds of cases. The overall Boolean status for "being vulnerable" in at least one way vs. Daniel's comment seem mismatched and not all that relevant to each other. The "tools, not policy" point could apply to both. My point here is more limited to the potentially mismatched kind of referenced context. =3D=3D=3D Mark Millard marklmi at yahoo.com