RE: Please add warning to download page if tarball isn't patched up with all latest security fixes

[Thijs Schreijer <thijs@...>]

> -----Original Message-----
> From: lua-l-bounces@lists.lua.org [mailto:lua-l-bounces@lists.lua.org] On
> Behalf Of Tim Hill
> Sent: vrijdag 22 augustus 2014 17:18
> To: Lua mailing list
> Subject: Re: Please add warning to download page if tarball isn't patched up
> with all latest security fixes
> 
> 
> On Aug 21, 2014, at 11:50 PM, Thijs Schreijer <thijs@thijsschreijer.nl>
> wrote:
> 
> >> The Lua download page is intended to help people who do not
> >> know much, not to remind people who should know better what
> >> things they must not forget. The kind of wishy-washy uncertainty
> >> in these proposals will just confuse, even scare, the person who
> >> is downloading Lua for the first time, to quite probably a Windows
> >> machine, for what is likely to the first C program she ever compiles.
> >>
> >> Show me one download page of a well-tested reliable product
> >> that contains the sort of phrasing you suggest. Just one.
> >
> > Good code without documentation is hard to use. Same applies here.
> Document the release properly in that it might not be patched up to the
> latest, just makes it more clear. Doesn't harm anybody.
> >
> > +1 for Jonas's proposal
> >
> > Sorry Dirk, imo you're making a silly argument here.
> >
> > Thijs
> 
> No, imo Dirk is right. Pretty much all that fancy wording says is "bugs
> discovered after this release are bugs in this release", which is pointless.
> 
> -Tim
> 
> 

I don't disagree with that, neither would the OP I think, but fact is that mistakes were made by distro maintainers. It's easy to blame them for the mistake, but as they are important gatekeepers, it would be nice for a change to stop academic disputes on pureness and black/white, and just add a simple phrase to prevent anyone from making the same mistake again. There's an upside, without a downside, so not changing comes down to stubbornness.

Thijs