Re: define issues

[Eli Zaretskii]

> Date: Mon, 16 Mar 2009 23:55:08 -0700
> From: Philip Guenther <address@hidden>
> Cc: address@hidden, address@hidden
> 
> On Mon, Mar 16, 2009 at 9:16 PM, Eli Zaretskii <address@hidden> wrote:
> ...
> > Maybe we should just improve the documentation to better explain what
> > $(eval) does and how, so that even non-experts will see the light.
> > What is missing from the current docs that you think should be there
> > (and I don't mean the warning to stay away)?
> 
> Double-evaluation in various languages has been a source of bugs and
> security holes for years, but you don't think people should be warned
> away from this?

In my experience, warnings to stay away without explanations have the
opposite effect: people get curious and "try that at home" anyway.

> "Here folks, see how cleanly this slices your fingers off?   Ain't it
> great!?!  Oh, and the results are completely unlike normal makefiles
> and unmaintainable by the people who follow you!  Perfect job
> security, assuming you keep your job after you've lost your fingers!"

April 1 is still a fortnight away.