[R] Confirmation of no Electronic Communication functionality

[Marc Schwartz]

Hi,

In addition to the replies that you have already received, it is reasonable to question why you wish to download a version of R that is over 5 years old. Version 3.6.1 was released in July of 2019.

If you are concerned about security, which is going to be a scenario specific discussion, as Jeff rightly notes below, you might also want to be aware that R version 4.4.0 was patched earlier this year for a reported code execution vulnerability that is relevant to versions of R back to 1.4.0.

  https://blog.r-project.org/2024/05/10/statement-on-cve-2024-27322/

Thus, using a currently released and supported version of R would be in your best interest.

Regards,

Marc Schwarzt

> On Dec 13, 2024, at 10:45 AM, Jeff Newmiller via R-help <r-help using r-project.org> wrote:
> 
> R is a programming language. If you program it to communicate, it will. Also, it is designed to work with user-contributed packages of code... the process of downloading the packages is communication, and the downloaded packages may communicate if you invoke them (that is often why they are created).
> 
> You may need a more nuanced view of software restrictions if you have this discussion about using R with your IT people than "has no electronic communication functionality". For example, the code is open-source... if there is untrusted behavior then it can be seen in the source code.
> 
> On December 13, 2024 6:24:18 AM PST, Edward Woo via R-help <r-help using r-project.org> wrote:
>> Hi,
>> 
>> I am trying to download R version 3.6.1 onto my company computer and need an email confirming that r does not include any electronic communication functionality within the program.
>> 
>> Thank you very much!
>> 
>> Best,
>> Edward Woo
>> 
>> 
>> Edward Woo
>> Municipals Securities Group
>> Jefferies LLC
>> 520 Madison Avenue, 3rd Floor
>> New York, NY 10022
>> Phone: 212-708-2958
>> ewoo using jefferies.com<mailto:ewoo using jefferies.com>
>> 
>>