From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTP id 3B84A43E13 for ; Mon, 15 Aug 2022 19:35:28 +0000 (UTC) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id 3477A68B95F; Mon, 15 Aug 2022 22:35:26 +0300 (EEST) Received: from mail-wr1-f44.google.com (mail-wr1-f44.google.com [209.85.221.44]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id 3107468B4FD for ; Mon, 15 Aug 2022 22:35:20 +0300 (EEST) Received: by mail-wr1-f44.google.com with SMTP id bu15so1663187wrb.7 for ; Mon, 15 Aug 2022 12:35:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=content-transfer-encoding:in-reply-to:references:to:from:subject :user-agent:mime-version:date:message-id:from:to:cc; bh=5mQK0RxutrSVBaWAlDynVfiBC8/YJ+KEV7TN1zBLdNo=; b=To48uB24q9xOJsHyGfYq7vVtTK89elPqB5vsE5mDdt9BtXI5ArJ3cxZKU0WhE5w9+9 Cw0zL/jWy3qFVpa6xIJO3VZvoj4xFikI5KzmIdR4Mum8sReNd7uG/T3B+EzgFHiiKo1G XGyxWV2AIgG7L1/d/G6tTWo9DZXW8N593DcSgH4v8LE4K8i+KitEZ1g3f178YNHRJeTK 1KcSfPscfBOfGEfKZDZvJ8qH7Ut/SOPoGPWl4PHzk1HG+SypE8blyrDYhlxODdewDdH+ Ou4pEiKpDDAr5rMHhrI4weTCbO5zpjHNsMInBC6+70lxihYDZXaJxX99ZQvK4Nagte8e O0Cg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:in-reply-to:references:to:from:subject :user-agent:mime-version:date:message-id:x-gm-message-state:from:to :cc; bh=5mQK0RxutrSVBaWAlDynVfiBC8/YJ+KEV7TN1zBLdNo=; b=4r5ncSB2aXeuM2QUAltG5wZE8WoNeueti/qw1qMSWno0r060r31sIjlYEn9jvAVICS TltWQa+ThZs3SW5qL3GycaNgLl3qRYpEymf4SvaLlKZ43Uc07mLwIbh5bFRBsOUVicYV V3DfqisebQFZa+Kf2cAVlaqhJMP2pCjPJ+n8WxpX+0t4EA1rreYpezwuhlrOYSS9d4sW 9AKEVYw+vY1OUzV6DgLOT3OG4HQJ6hLsnDbAFsRDCZ5IqAfe7BDyOYnbz7nPJ7ulzbxd Qur8ziKw1RBXoDG8KctSqs48H3lwkjBU0PMVRTHjhZBDUd4+cg5JL2zu4kwFB9RgkjYS mHrg== X-Gm-Message-State: ACgBeo3ex3+pvT6h7InnyKDTtPaIR8nuyyvv0vVUnOKBfI3oIIkAxY+N +MBb7pnj2X3FHNLLHGGFMPWq80c1z7c= X-Google-Smtp-Source: AA6agR5Q8Tmb9QW7jDXQs0ucTY7sPStV5s1TxME1ZBvLFtBCfXdR/T1MsLwbwh4ZNyNWawcGvRNW1g== X-Received: by 2002:adf:f085:0:b0:220:5a78:3a32 with SMTP id n5-20020adff085000000b002205a783a32mr9374793wro.223.1660592119204; Mon, 15 Aug 2022 12:35:19 -0700 (PDT) Received: from [192.168.1.106] ([149.12.10.163]) by smtp.googlemail.com with ESMTPSA id a3-20020a05600c224300b003a54109a6a0sm10301200wmm.3.2022.08.15.12.35.18 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 15 Aug 2022 12:35:18 -0700 (PDT) Message-ID: <7e0c471e-992d-9bed-8f47-7ce3401f9863@gmail.com> Date: Mon, 15 Aug 2022 20:35:18 +0100 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.12.0 From: Derek Buitenhuis To: ffmpeg-devel@ffmpeg.org References: <20220810222708.186270-1-derek.buitenhuis@gmail.com> In-Reply-To: <20220810222708.186270-1-derek.buitenhuis@gmail.com> Subject: Re: [FFmpeg-devel] [PATCH] ipfsgateway: Remove default gateway X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" Archived-At: List-Archive: List-Post: On 8/10/2022 11:27 PM, Derek Buitenhuis wrote: > A gateway can see everything, and we should not be shipping a hardcoded > default from a third party company; it's a security risk. > > Signed-off-by: Derek Buitenhuis > --- > libavformat/ipfsgateway.c | 11 ++++------- > 1 file changed, 4 insertions(+), 7 deletions(-) I've been asked by almost all the active developers on FFmpeg at this point to push this while we debate the error message, gateway list / solution, nuking, etc. I quintuple checked on IRC it was OK for me to push in the meantime. Logs are there. Many distros/packagers have already backported this patch to 5.1 themselves, as they really (shockingly) do not want a default gateway. So: Pushed. Let us continue the discusion on the other aspects of this topic. (Please do not send me hate mail or harassment. I really did check.) - Derek _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".