Re: Security issues in Emacs packages

2020-11-25 Thread Tim Cross
Jean Louis writes: > * Tim Cross [2020-11-26 02:40]: >> > OK it is great that it is so. Are you maybe author doing it? Is there >> > any reference that authors are doing so? I have MELPA downloaded you >> > could tell me how do I see that author is deciding if package is for >> > release? >>

Re: Security issues in Emacs packages

2020-11-25 Thread Tim Cross
Greg Minshall writes: > Tim, > >> I think you missed my point. There is no benefit in MELPA adopting >> signed packages because there is no formal code review and no vetting >> of the individuals who submit the code. > > it occurs to me there might be one benefit: if George, whom you trust, >

Re: Local variables insecurities - Re: One vs many directories

2020-11-25 Thread Tom Gillespie
> As there is the option ! to "apply local variables and permanently > mark these values" but there is no option "not to apply local > variables and permanently mark these values". I have a longer reply that I will send tomorrow, but wanted to respond to this. Yes exactly! I have the equivalent

Re: Local variables insecurities - Re: One vs many directories

2020-11-25 Thread Jean Louis
Additionally, as a good example of faulty design, user is coerced to ACCEPT local variables rather than is given fair choice. As there is the option ! to "apply local variables and permanently mark these values" but there is no option "not to apply local variables and permanently mark these

Re: Local variables insecurities - Re: One vs many directories

2020-11-25 Thread Greg Minshall
Tom, > 2. If mutt is launching Emacs, you can pass --eval "(setq >enable-local-eval nil)" on the command line and all file local >variables will be ignored and treated as plain text. maybe that is one thing that could really help here. possibly mutt and other emacs-based mail readers,

Re: Security issues in Emacs packages

2020-11-25 Thread Greg Minshall
Tim, > I think you missed my point. There is no benefit in MELPA adopting > signed packages because there is no formal code review and no vetting > of the individuals who submit the code. it occurs to me there might be one benefit: if George, whom you trust, says, "I've been running version

Re: Security issues in Emacs packages

2020-11-25 Thread Jean Louis
* Tim Cross [2020-11-26 02:40]: > > OK it is great that it is so. Are you maybe author doing it? Is there > > any reference that authors are doing so? I have MELPA downloaded you > > could tell me how do I see that author is deciding if package is for > > release? > > > > You can clone the melpa

Re: Local variables insecurities - Re: One vs many directories

2020-11-25 Thread Jean Louis
* Tom Gillespie [2020-11-26 05:07]: > Hi Jean, > > Some points in summary before a long email. > 1. Having an accepting default behavior as a user (i.e., saying yes to >all prompts) is bad security practice. The only thing that systems >can do is prompt as infrequently as possible in

Re: One vs many directories

2020-11-25 Thread Ihor Radchenko
> For my own setup I run code in a hook to update the agenda whenever I > change a TODO state, clock in or clock out, but that has performance > problems when I do it while the Agenda is shown. You do not have or update the whole agenda view. I use the following code to update the clocking

Re: consistent behavior across babel languages

2020-11-25 Thread ian martins
On Wed, Nov 25, 2020 at 2:06 AM Tim Cross wrote: > > I will try to allocate time on the weekend to > review what you have and see if there are any I know of which you have > not included. That would be great. On Wed, Nov 25, 2020 at 2:39 PM Tom Gillespie wrote: > > Since there are so many

Re: One vs many directories

2020-11-25 Thread Ihor Radchenko
> Can I automated the execution of Babel code upon opening of the Org > file? Adding to other suggestions, you can always add a custom function to org-mode-hook instead of playing with file-local variables. > Then we comes to actual execution of tasks. How do we get reminded? > > Is the reminder

Re: Is Org really so simple?

2020-11-25 Thread Ihor Radchenko
> Only philosophy I know is that it is plain text. Is there any official > philosophy? I have no idea, at least manual does not give me > references. I cannot find "philosophy", send me references. You are right. There is no official "philosophy" in org. In my reply I tried to follow the topic

Re: Bug: Font highlighting with in-line latex math broken [9.4 (9.4-dist)]

2020-11-25 Thread Vladimir Lomov
Hello, ** Edmund Christian Herenz [2020-11-25 16:50:46 -0300]: > Hi, > me again... > On Wed, Nov 25, 2020 at 04:32:28PM -0300, Edmund Christian Herenz wrote: >> This is only cosmetical, but a bit annoying. > Ah, and while we are at it > Entering a line break in $math > mode$ is also valid

Re: Local variables insecurities - Re: One vs many directories

2020-11-25 Thread Tom Gillespie
Hi Jean, Some points in summary before a long email. 1. Having an accepting default behavior as a user (i.e., saying yes to all prompts) is bad security practice. The only thing that systems can do is prompt as infrequently as possible in hopes that people don't get prompt fatigue. Emacs

Re: Security issues in Emacs packages

2020-11-25 Thread Tim Cross
Jean Louis writes: >> >> this is wrong. In melpa you specify either a commit (SHA) or a branch or >> both. The repository owner has control over this. MELPA doesn't just >> pull data from the repository because there has bene an update. You can >> configure things so that whenever data is

Re: Security issues in Emacs packages

2020-11-25 Thread Jean Louis
* Tim Cross [2020-11-26 01:47]: > I think you missed my point. There is no benefit in MELPA adopting > signed packages because there is no formal code review and no vetting of > the individuals who submit the code. Do you think it is really their reason? Or maybe you are developer in MELPA?

Re: Security issues in Emacs packages

2020-11-25 Thread Tim Cross
Jean Louis writes: > * Tim Cross [2020-11-25 10:01]: >> >> Jean Louis writes: >> >> > * Tim Cross [2020-11-24 23:40]: >> >> If people are really concerned about security, they should look first at >> >> their use of repositories like MELPA. There is no formal review or >> >> analysis of

Re: Local variables insecurities - Re: One vs many directories

2020-11-25 Thread Jean Louis
* Tim Cross [2020-11-25 23:54]: > I guess this is probably the main point where we disagree. > > Emacs is first and foremost a programmers editor. It was never designed > as a general purpose editor, but rather specifically as an editor for > programmers. Yes. And when I was born as baby I was

Re: Local variables insecurities - Re: One vs many directories

2020-11-25 Thread Tim Cross
Jean Louis writes: > * Eric S Fraga [2020-11-25 16:58]: >> On Wednesday, 25 Nov 2020 at 16:13, Jean Louis wrote: >> > I use Mutt. >> > The message is opened in Emacs in mail-mode >> >> Ah, so mutt saves content in a file which is then opened by >> Emacs. Okay, that makes sense. Gnus does

Re: [PATCH] doc/org-manual.org: Extend table formulas Lisp form documentation

2020-11-25 Thread Daniele Nicolodi
On 25/11/2020 05:37, Kyle Meyer wrote: > Daniele Nicolodi writes: > >> Hello, >> >> I always found the description of Lisp forms in Org table formulas not >> extremely clear, especially in regard to the use of mode flags. The >> attached patch tries to clarify the manual a bit. > > Thanks.

Re: Bug: Font highlighting with in-line latex math broken [9.4 (9.4-dist)]

2020-11-25 Thread Edmund Christian Herenz
Hi, me again... On Wed, Nov 25, 2020 at 04:32:28PM -0300, Edmund Christian Herenz wrote: > This is only cosmetical, but a bit annoying. Ah, and while we are at it Entering a line break in $math mode$ is also valid and should not break the font highlighting. CH.

Re: [PATCH] ob-ruby.el: allow specification of ruby command w/header arg

2020-11-25 Thread Juri Linkov
>> ob-ruby.el: allow specification of session ruby command w/header arg >> >> * lisp/ob-ruby.el (org-babel-ruby-initiate-session): Use a header argument >> to get ruby command. > > I've ported it to the Org repo, but please avoid doing this in the > future. The preferred method is for development

Re: consistent behavior across babel languages

2020-11-25 Thread Tom Gillespie
Hi Ian, Thanks for getting this started. I have been collecting a list of org babel issues and worg is definitely a better place to put them than in one big email. Since there are so many different features that a babel language implementation can support I don't want to try to put them all in

Bug: Font highlighting with in-line latex math broken [9.4 (9.4-dist)]

2020-11-25 Thread Edmund Christian Herenz
Hi, In AucTeX inserting $1\times10^{-18}$erg\,s\,cm$^{-2}$ Will correctly highlight $1\times10^{-18}$ and $^{-2}$ as math. However, in org mode I get erg\,s\,cm highlighted. This is only cosmetical, but a bit annoying. With best regards, Christian Herenz

Re: org-sbe to automate some source block executions

2020-11-25 Thread Jean Louis
* Ihor Radchenko [2020-11-25 14:40]: > > I am trying to implement it, do you see here anything below that I am > > doing wrong? Error is that it cannot find source block stages > > You should assign a name to your source block. Also, I am clueless why > you need a variable ":var results=stages".

Re: Browser org-capture bookmarklet

2020-11-25 Thread Jean Louis
* Ihor Radchenko [2020-11-25 15:53]: > Probably, you did not define the capture template your browser > extension/bookmarklet expects (it's usually a single letter). You may > look at https://github.com/sprig/org-capture-extension/issues/1 for > hints how to solve the problem. Now I have

Re: Browser org-capture bookmarklet

2020-11-25 Thread Jean Louis
* Ihor Radchenko [2020-11-25 15:53]: > Probably, you did not define the capture template your browser > extension/bookmarklet expects (it's usually a single letter). You may > look at https://github.com/sprig/org-capture-extension/issues/1 for > hints how to solve the problem. I got it working

Re: Local variables insecurities - Re: One vs many directories

2020-11-25 Thread Jean Louis
* Eric S Fraga [2020-11-25 16:58]: > On Wednesday, 25 Nov 2020 at 16:13, Jean Louis wrote: > > I use Mutt. > > The message is opened in Emacs in mail-mode > > Ah, so mutt saves content in a file which is then opened by > Emacs. Okay, that makes sense. Gnus does things the other way around: >

Re: Local variables insecurities - Re: One vs many directories

2020-11-25 Thread Eric S Fraga
On Wednesday, 25 Nov 2020 at 16:13, Jean Louis wrote: > I use Mutt. > The message is opened in Emacs in mail-mode Ah, so mutt saves content in a file which is then opened by Emacs. Okay, that makes sense. Gnus does things the other way around: opens the buffer (associated with a file in the

Re: Local variables insecurities - Re: One vs many directories

2020-11-25 Thread Jean Louis
* Eric S Fraga [2020-11-25 16:06]: > On Wednesday, 25 Nov 2020 at 15:38, Jean Louis wrote: > > I have not configured anything. In fact I have opened the email and I > > was surprised that I am getting those dialogues to execute local > > variables. > > Very strange. It was my email that

Re: One vs many directories

2020-11-25 Thread Jean Louis
* Ihor Radchenko [2020-11-25 16:16]: > > > ... It does > > evaluates and I get the result in the message buffer, but it does not > > expands in the Org buffer. > > It is expected behaviour. According to the docstring of org-sbe, it only > returns the value, but does not actually change buffer.

Re: One vs many directories

2020-11-25 Thread Jean Louis
* Eric S Fraga [2020-11-25 16:08]: > On Wednesday, 25 Nov 2020 at 14:46, Jean Louis wrote: > > I have got it to work as I had to name the source block. > > Yes, org-sbe looks for the first source block with the name > given. Nothing to do with headings etc. > > > It does evaluates and I get

org-indent-line of lines ending blocks

2020-11-25 Thread Jarmo Hurri
Greetings. # --- * Indentation of lines ending blocks #+begin_example My wish is that when the cursor is on the line indicating end of this block (end_example), and (org-indent-line) is

Font lock in inner blocks [was: Re: Differentiate source blocks in export?]

2020-11-25 Thread Joost Kremers
On Wed, Nov 25 2020, Eric S Fraga wrote: > On Wednesday, 25 Nov 2020 at 09:37, Joost Kremers wrote: >> I like this solution for the "Org-ness" of the syntax, and yes, =C-c >> '= works, but font lock is gone... > > Yes, font lock is gone unfortunately but I am not sure why that > is. Something

Re: Local variables insecurities - Re: One vs many directories

2020-11-25 Thread Eric S Fraga
On Wednesday, 25 Nov 2020 at 15:38, Jean Louis wrote: > I have not configured anything. In fact I have opened the email and I > was surprised that I am getting those dialogues to execute local > variables. Very strange. It was my email that instigated this part of the thread. I can view my

Re: One vs many directories

2020-11-25 Thread Ihor Radchenko
> ... It does > evaluates and I get the result in the message buffer, but it does not > expands in the Org buffer. It is expected behaviour. According to the docstring of org-sbe, it only returns the value, but does not actually change buffer. If you want to replace the RESULTS, you need to

Re: One vs many directories

2020-11-25 Thread Eric S Fraga
On Wednesday, 25 Nov 2020 at 14:46, Jean Louis wrote: > I have got it to work as I had to name the source block. Yes, org-sbe looks for the first source block with the name given. Nothing to do with headings etc. > It does evaluates and I get the result in the message buffer, but it > does not

Re: ob-python: import local package into a session

2020-11-25 Thread Joost Kremers
On Tue, Nov 24 2020, Jack Kamm wrote: > If you install the package using either "python setup.py develop", or > "pip install -e", then Python will install your code via symlinks > instead of copying, so then you don't have to worry about reinstalling > every time you make an edit. Hey, that's

Re: Browser org-capture bookmarklet

2020-11-25 Thread Ihor Radchenko
Probably, you did not define the capture template your browser extension/bookmarklet expects (it's usually a single letter). You may look at https://github.com/sprig/org-capture-extension/issues/1 for hints how to solve the problem. Best, Ihor Jean Louis writes: > I have started using

Browser org-capture bookmarklet

2020-11-25 Thread Jean Louis
I have started using Org-capture but now without changing Emacs session it stopped working with error: Greedy org-protocol handler. Killing client. No server buffers remain to edit Do you know any how why this happens?

Local variables insecurities - Re: One vs many directories

2020-11-25 Thread Jean Louis
* Tim Cross [2020-11-25 09:41]: > >> Why is it a security issue? The variables do need to be close to the end > >> — 3000 characters is only about 50 lines. > > > > Emacs users, Org users on our mailing lists are not so private. Their > > names and email addresses are in the public database.

Re: One vs many directories

2020-11-25 Thread Jean Louis
* Eric S Fraga [2020-11-24 12:46]: > On Tuesday, 24 Nov 2020 at 12:00, Jean Louis wrote: > > Can I automated the execution of Babel code upon opening of the Org > > file? > > You can, by using file local variables. For instance, for some files, I > do this: > > #+begin_src org > ,* local

Re: One vs many directories

2020-11-25 Thread Ihor Radchenko
> When I do C-c a it runs (org-agenda) but I do not have "g" and I am on > development version. The C-c a window is made so that I cannot go with > cursor inside and that I cannot even expect the key map neither invoke > command by M-x and I cannot even M-: C-c a will first show so-called agenda

Re: org-sbe to automate some source block executions

2020-11-25 Thread Ihor Radchenko
> I am trying to implement it, do you see here anything below that I am > doing wrong? Error is that it cannot find source block stages You should assign a name to your source block. Also, I am clueless why you need a variable ":var results=stages". You should probably do something like the

Re: One vs many directories

2020-11-25 Thread Jean Louis
* Texas Cyberthal [2020-11-25 13:40]: > > You also spoke of device, do you really mean physical device? > > Brain-Computer Interface is a term that usually means an > electromagnetic connection between nerves and electronics. However, > really a keyboard is a superior version of that for

[PATCH] add :tree-type 'month' in org-capture-templates description (and fix documentation about that)

2020-11-25 Thread Florian Dufour
Hi! I noticed one typo in org-manual.org: 'month' value for 'tree-type' property should not be @code{month} but only 'month'. Moreover, I added this 'month' value to org-capture-templates description in org-capture.el. This is just documentation, but I had to read to code in order to use this

Re: Security issues in Emacs packages

2020-11-25 Thread tomas
On Wed, Nov 25, 2020 at 12:26:11PM +0300, Jean Louis wrote: > * to...@tuxteam.de [2020-11-25 12:08]: > > On Wed, Nov 25, 2020 at 11:23:27AM +0300, Jean Louis wrote: > > > > [...] > > > > > [...] and not from Chinese distributor [...] > > > > I think this was an unnecessary slur. > > Why,

Re: One vs many directories

2020-11-25 Thread Texas Cyberthal
Hi Jean, > There are those who die and come back and view things from above and can > think and use their mind even though brain was turned off temporarily. I didn't say that the mind always turns off when the brain is damaged. > You also spoke of device, do you really mean physical device?

Minor fix in org-shifttab on master

2020-11-25 Thread Gustav Wikström
Thought to mention that commit 9a154910ed is pushed to master, It fixes an issue that drawers were opened when cycling global visibility using org-shifttab with a numeric argument (to only show outline levels up to that level). /Gustav

org-sbe to automate some source block executions

2020-11-25 Thread Jean Louis
* Eric S Fraga [2020-11-24 12:46]: > On Tuesday, 24 Nov 2020 at 12:00, Jean Louis wrote: > > Can I automated the execution of Babel code upon opening of the Org > > file? > > You can, by using file local variables. For instance, for some files, I > do this: > > #+begin_src org > ,* local

Re: One vs many directories

2020-11-25 Thread Jean Louis
* Texas Cyberthal [2020-11-25 09:58]: > Hi Jean, > > > Now, what is exomind? > > https://cyberthal-docs.nfshost.com/cyborganize/exomind/ How I like those thoughts. > Mind vs brain > Your brain is the squishy jelly between your ears. > Your mind is what disappears when that jelly gets

Re: Security issues in Emacs packages

2020-11-25 Thread Jean Louis
* to...@tuxteam.de [2020-11-25 12:08]: > On Wed, Nov 25, 2020 at 11:23:27AM +0300, Jean Louis wrote: > > [...] > > > [...] and not from Chinese distributor [...] > > I think this was an unnecessary slur. Why, there is legitimate mirror in China. I did not mean nothing wrong with it. I hope

columnview: could «id» be a list of values?

2020-11-25 Thread Uwe Brauer
Hi I have the following structure in a document. I will include the document at the end of the message for better readability. The structure is as follows * Sheet 1 ** G1/S1/E1 (id G1-S1-E1) ** G2/S1/E2 (id G2-S1-E2) ** Table generated via coumnview containing the tree * Sheet 2 ** G1/S2/E1

issues and limitations with macros and export process

2020-11-25 Thread Dauer, Michael
Hi, My use case: I export various sub-branches with different exporters (html, latex, ox-taskjuggler) via dispatcher and more via custom code. The issues: 1. Include files about the current branch and on file level are not considered. 2. Macros that are evaluated during expansion only see the

Re: Differentiate source blocks in export?

2020-11-25 Thread Eric S Fraga
On Wednesday, 25 Nov 2020 at 09:37, Joost Kremers wrote: > I like this solution for the "Org-ness" of the syntax, and yes, =C-c > '= works, but font lock is gone... Yes, font lock is gone unfortunately but I am not sure why that is. Something for somebody who understands the syntax highlighting

Re: Security issues in Emacs packages

2020-11-25 Thread tomas
On Wed, Nov 25, 2020 at 11:23:27AM +0300, Jean Louis wrote: [...] > [...] and not from Chinese distributor [...] I think this was an unnecessary slur. Cheers - t signature.asc Description: Digital signature

Re: One vs many directories

2020-11-25 Thread Jean Louis
* Dr. Arne Babenhauserheide [2020-11-25 11:14]: > > Jean Louis writes: > > > * Dr. Arne Babenhauserheide [2020-11-24 21:48]: > >> > >> Jean Louis writes: > >> > >> > Some people maybe access multiple Org files through Agenda, me I > >> > don't. Some items are "non existent" and I do not

Local variables liberties

2020-11-25 Thread Jean Louis
* Dr. Arne Babenhauserheide [2020-11-25 11:11]: > > Jean Louis writes: > > > * Dr. Arne Babenhauserheide [2020-11-24 21:51]: > >> > >> Jean Louis writes: > >> >> The start of the local variables list should be no more than 3000 > >> >> > characters from the end of the file > >> >> > >> >>

Security issues in Emacs packages

2020-11-25 Thread Jean Louis
* Tim Cross [2020-11-25 10:01]: > > Jean Louis writes: > > > * Tim Cross [2020-11-24 23:40]: > >> If people are really concerned about security, they should look first at > >> their use of repositories like MELPA. There is no formal review or > >> analysis of packages in these repositories,

Re: Differentiate source blocks in export?

2020-11-25 Thread Joost Kremers
On Wed, Nov 25 2020, Eric S Fraga wrote: > On Tuesday, 24 Nov 2020 at 23:02, Joost Kremers wrote: >> That, unfortunately, seems to make it impossible to edit the source block as >> Octave (or in my case Python) code. Pressing =C-c '= in this source block >> gives >> me an Org buffer. > > Take

Re: One vs many directories

2020-11-25 Thread Dr. Arne Babenhauserheide
Jean Louis writes: > * Dr. Arne Babenhauserheide [2020-11-24 21:48]: >> >> Jean Louis writes: >> >> > Some people maybe access multiple Org files through Agenda, me I >> > don't. Some items are "non existent" and I do not know how to ask >> > agenda to refresh itself. >> >> Simply press

Re: One vs many directories

2020-11-25 Thread Dr. Arne Babenhauserheide
Jean Louis writes: > * Dr. Arne Babenhauserheide [2020-11-24 21:51]: >> >> Jean Louis writes: >> >> The start of the local variables list should be no more than 3000 >> >> > characters from the end of the file >> >> >> >> >> >> Given the length of the email, I guess this is why Emacs saw

Re: Differentiate source blocks in export?

2020-11-25 Thread Eric S Fraga
On Tuesday, 24 Nov 2020 at 23:02, Joost Kremers wrote: > That, unfortunately, seems to make it impossible to edit the source block as > Octave (or in my case Python) code. Pressing =C-c '= in this source block > gives > me an Org buffer. Take away the begin...end org block itself which I only