Gnus development mailing list
 help / color / mirror / Atom feed
From: Jeremy Maitin-Shepard <jbms@attbi.com>
Subject: Re: Cache passwords
Date: Tue, 30 Dec 2003 20:52:47 -0500	[thread overview]
Message-ID: <877k0dlpn4.fsf@jbms.ath.cx> (raw)
In-Reply-To: <m3k74dbxih.fsf@defun.localdomain> (Jesper Harder's message of "Wed, 31 Dec 2003 02:12:54 +0100")

Jesper Harder <harder@ifa.au.dk> writes:

> Jeremy Maitin-Shepard <jbms@attbi.com> writes:
>> Given that garbage collection is used, and the high-level nature of
>> emacs lisp, I that there is good reason to believe that regardless of
>> any amount of effort, the password might remain somewhere in memory for
>> a while.

> I do believe that explicitly overwriting a string, e.g. with
> `clear-string', *will* change the bits immediately.

That is true, but you don't know how many copies were made while
reading it from the minibuffer, etc.

> But it's less obvious what the effect of `clrhash' is, as Simon notes.

Indeed, this probably does not zero the individual strings.

-- 
Jeremy Maitin-Shepard



  reply	other threads:[~2003-12-31  1:52 UTC|newest]

Thread overview: 14+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2003-12-21 11:18 Kai Grossjohann
2003-12-21 11:52 ` Simon Josefsson
2003-12-30 21:42   ` Simon Josefsson
2003-12-31  1:56     ` Lars Magne Ingebrigtsen
2003-12-30 21:55   ` Jesper Harder
2003-12-30 22:26     ` Simon Josefsson
2003-12-30 23:59       ` Jesper Harder
2003-12-31  0:14         ` Simon Josefsson
2003-12-31  0:37           ` Jesper Harder
2003-12-31  1:57             ` Lars Magne Ingebrigtsen
2003-12-31  1:03           ` Jeremy Maitin-Shepard
2003-12-31  1:12             ` Jesper Harder
2003-12-31  1:52               ` Jeremy Maitin-Shepard [this message]
2003-12-31  2:01                 ` Lars Magne Ingebrigtsen

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=877k0dlpn4.fsf@jbms.ath.cx \
    --to=jbms@attbi.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).