Allowing not-the-author to delete a module, in general, is obviously also very bad. There is already a process in place to request deletion a module from the proxy. See the last entry here: https://proxy.golang.org/ This thread isn't really connected to this news story, honestly. A manual process for deleting malicious modules already exists, an automated one available to the general public is inadvisable and one only available to the module author will do nothing, as they are almost generally malicious in this case.
The topic of this thread really only makes sense for accidentally published modules. On Thu, 6 Feb 2025 at 20:52, Mike Schinkel <m...@newclarity.net> wrote: > > On Feb 6, 2025, at 1:55 PM, 'Sean Liao' via golang-nuts < > golang-nuts@googlegroups.com> wrote: > > > > a delete in the control of the module author would make it worse, as you > can serve malicious modules for a while, then delete and hide it, making it > unsuitable, unlike the current situation. > > > > - Sean > > > Yes. Immediately after emailing I realized someone would — rightfully, > according to the wording I used — interpret my comment to mean I was > suggesting a feature to allow the author to delete. That was not my > intent. > > I was instead just (secondarily) pointing out there is a need to delete > existing packages, when they are malicious, and (primarily) making people > aware of the specific vulnerability. > > Sorry for my inelegant wording. > > -Mike > > -- > You received this message because you are subscribed to the Google Groups > "golang-nuts" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to golang-nuts+unsubscr...@googlegroups.com. > To view this discussion visit > https://groups.google.com/d/msgid/golang-nuts/C456F8A3-0E92-456B-9581-74DDBD19DC25%40newclarity.net > . > -- You received this message because you are subscribed to the Google Groups "golang-nuts" group. To unsubscribe from this group and stop receiving emails from it, send an email to golang-nuts+unsubscr...@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/golang-nuts/CAEkBMfGV1sQ4m4G8mxStoYqdJ-E%2BvXsib-O8JELoasTgOGPvuA%40mail.gmail.com.
