From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp10.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id 8J9LKcT4xGLR7gAAbAwnHQ (envelope-from ) for ; Wed, 06 Jul 2022 04:51:48 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp10.migadu.com with LMTPS id YL1QKMT4xGI+iAAAG6o9tA (envelope-from ) for ; Wed, 06 Jul 2022 04:51:48 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id DDF98BBDE for ; Wed, 6 Jul 2022 04:51:47 +0200 (CEST) Received: from localhost ([::1]:44422 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1o8v8k-0004qQ-9H for larch@yhetil.org; Tue, 05 Jul 2022 22:51:46 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:39604) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1o8v80-0004qE-Gx for emacs-orgmode@gnu.org; Tue, 05 Jul 2022 22:51:00 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:59676) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1o8v7z-00017f-8C; Tue, 05 Jul 2022 22:50:59 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=Date:References:Subject:In-Reply-To:To:From: mime-version; bh=TAWBxUESZaju5Dzi2hc6rKKL+psdASWSs31kyVyCVnE=; b=J4PJNf2tLVmu zTU/e7Nyg0Sdw0Dnsj6GIxi/3+yBVOwluP8z3mStiqDlDuQ5wiUQW5q/kHi9K7VKp9dG59gpAMd47 9qxQ5O8qk8Tf9Nafk8iUrF2QSfmfo5NY83ttGWqpzwjCq4MrTA/IvRay8lrquhffu2rZOfoxjSJTN wpHaLdEKNRVhbteAolWcqzBk2Ix+Cs5Yev4EufuDOaawg508jcgXfXlSQV+ZmHjj0vG9e1hqSnjpU pTmj7o0B/18UenVxlFBrR0+dSw5ZySZpixJB/ZVGg7kVHW9SESXsOHg0jqwe4+PqcLWrHUdv2zk/E LwbGnS0rQYgCDBcoN53Mpg==; Received: from rms by fencepost.gnu.org with local (Exim 4.90_1) (envelope-from ) id 1o8v7y-0001Pn-V9; Tue, 05 Jul 2022 22:50:58 -0400 Content-Type: text/plain; charset=Utf-8 From: Richard Stallman To: Ihor Radchenko Cc: tecosaur@gmail.com, vikasrawal@gmail.com, bzg@gnu.org, c.buhtz@posteo.jp, emacs-orgmode@gnu.org In-Reply-To: <87tu7xm4ru.fsf@localhost> (message from Ihor Radchenko on Mon, 04 Jul 2022 20:38:45 +0800) Subject: Re: Links to javascript-based websites from orgmode.org: Paypal and Github References: <0472f849f3ae42df68b0f031d61594d9@posteo.de> <87ilt3yvqj.fsf@localhost> <877d9j3u91.fsf@localhost> <17c95e5a298c213c63b6f7ac9f05aac4@posteo.de> <87y21z2d2b.fsf@localhost> <871qzqg81c.fsf@gnu.org> <87r17q2n3i.fsf@localhost> <877d9ij990.fsf@gnu.org> <87iloyyd1y.fsf@localhost> <87r13kxh60.fsf@localhost> <87r13ao1p9.fsf@localhost> <87fsjhz7t0.fsf@gmail.com> <87tu7xm4ru.fsf@localhost> Message-Id: Date: Tue, 05 Jul 2022 22:50:58 -0400 X-BeenThere: emacs-orgmode@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "General discussions about Org-mode." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: rms@gnu.org Errors-To: emacs-orgmode-bounces+larch=yhetil.org@gnu.org Sender: "Emacs-orgmode" X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1657075908; h=from:from:sender:sender:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:content-type:content-type: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=TAWBxUESZaju5Dzi2hc6rKKL+psdASWSs31kyVyCVnE=; b=R+wvcONgMqZ62iwUM/MUinJm6DyMxf1TB7BVijJU7wRG/LQH6/x1EaGUxm2hsrU+uY4SVY Jlxnhum1kG1W7kgRZoAlvwIIhcgjE4QFoyc61Pajz8uSwmZnJU19OfJkPu6giw00hVz74m LUE5ooV0r2vlziguN7ICsnWhChz+1YRcGx7Wy66sQ3MjCQGsVYDwbYJ5dtboni/n2SH8gq gTWmlUbv+91LtGORqn7i5f2lVriJM9tsbTKUzWvhGq7pD5DdbQzrTd5AAN5Qk+RQL3IzMh YSviWO5Wn3TEN+q2aUy0kQgD+39tW9PU+AoBP3IsDwu8nRX4wsDpD6DqOgiQYg== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1657075908; a=rsa-sha256; cv=none; b=Gct4Rvj8LX64dQLq3ljshYLr65btphO0tTA+et1ZFt/zbpGA9p9lW2JD8/3eRPUpfx66B9 a37W4K60Sj/w9yOjYx3qUwqOM2iizQbwVBh/yM3LkCnsLSnqpcaY+RJ/wl4EZMhIE6KWyp fS9f5Fp9YmGNFFvm0jUyIFrYFS0Jbb1/6zF+fjE/py9+VfN95eVJrP4luWnJm0c4vAx+eR mkjSF709ktmsoAP9gcXyVR2Nlj3bKx/366Wj87N5DZoiSIaOtgrdEDFXF18Wz5xQ1fePs1 MHZayx5+2Awfl1MQO7bKJvG8zdbNdVwLMdM92EUyJbTmv98tH+mcg8bDRhHwhA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=gnu.org header.s=fencepost-gnu-org header.b=J4PJNf2t; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of "emacs-orgmode-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="emacs-orgmode-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -3.40 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=gnu.org header.s=fencepost-gnu-org header.b=J4PJNf2t; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of "emacs-orgmode-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="emacs-orgmode-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: DDF98BBDE X-Spam-Score: -3.40 X-Migadu-Scanner: scn0.migadu.com X-TUID: 9Y8L5Mp0ctyw [[[ To any NSA and FBI agents reading my email: please consider ]]] [[[ whether defending the US Constitution against all enemies, ]]] [[[ foreign or domestic, requires you to follow Snowden's example. ]]] > > As it happens though, Stripe seem to have open sourced all of their frontend > > code — all of these repos seem to be MIT-licensed Wow! If that is what it might be, it would be great news. But we had better verify it carefully, because it sounds too good to be true. Would someone like to check the details thoroughly? Here are some questions to check: 1. Does "front-end code" mean the JavasCript code for their payment pages? Or else, what is it? Is it code to use in apps? The case that we're concerned with is payment to web sites. 2. Did their release include _all_ of the client code that a user must run in order to make a payment to a web site that uses Stripe? 3. Do their payment pages actually send that source code, as released? Or do they send use minified or a compiled version? Either way. does it exactly correspond to the released source code? 4. Did they label the code they send, for LibreJS to recognize? -- Dr Richard Stallman (https://stallman.org) Chief GNUisance of the GNU Project (https://gnu.org) Founder, Free Software Foundation (https://fsf.org) Internet Hall-of-Famer (https://internethalloffame.org)