Re: [Ksummit-discuss] [MAINTAINER SUMMIT] community management/subsystem governance

[Geert Uytterhoeven <geert@linux-m68k.org>]

[ To/Cc edited manually, Mail-Followup-To: seems to be weird ]

On Tue, Sep 18, 2018 at 7:31 PM Konstantin Ryabitsev
<konstantin@linuxfoundation.org> wrote:
> On Tue, Sep 18, 2018 at 05:08:02PM +0000, Tim.Bird@sony.com wrote:
> >> https://urldefense.proofpoint.com/v2/url?u=https-
> >> 3A__korg.wiki.kernel.org_userdoc_mail-23sending-5Foutgoing-
> >> 5Fmail&d=DwICAg&c=fP4tf--1dS0biCFlB0saz0I0kjO5v7-
> >> GLPtvShAo4cc&r=rUvFawR4KzgZu1gSN5tuozUn7iTTP0Y-
> >> INWqfY8MsF0&m=90EMZrRfkvlzWBNtrJ8QnHDj3-EwehEZhQiC5YJY-
> >> Uk&s=xtUgBLn5bjLazevAEIdAoHAGclbgin-D9Cek15hsuZk&e=
>
> Ick.

Cool. And that URL actually works for me, even though wget truncated it.
Can't see any damage in the actual result.

But, is the service exploitable?

> So, what if we imagine that there's an imaginary web tool that does
> this:
>
> 1. Allows people to generate an account
> 2. Verifies their email address
> 3. Instructs people how to generate a patch or series of patches
> 4. Gives a way to upload generated patches
> 5. Runs checkpatch to make sure there are no errors
> 6. Runs get_maintainer to find out where the patch(es) should be sent to
> 7. (Does more imaginary magic, such as looking up message-id references)
> 8. Mails it out
>
> Would that be useful or solve any problems? Or would that, on the
> contrary, create more problems than it solves?

Sounds useful. Perhaps even with github integration, so you can send a
series with the work in your branch? Needs some serious safeguards, to
prevent spamming everyone with e.g. the full patch series since v2.6.12-rc2.

I'm actually surprised such an accident never happened so far with
git send-email ;-)

Gr{oetje,eeting}s,

                        Geert

-- 
Geert Uytterhoeven -- There's lots of Linux beyond ia32 -- geert@linux-m68k.org

In personal conversations with technical people, I call myself a hacker. But
when I'm talking to journalists I just say "programmer" or something like that.
                                -- Linus Torvalds