From mboxrd@z Thu Jan  1 00:00:00 1970
X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/39820
Path: main.gmane.org!not-for-mail
From: Florian Weimer <fw@deneb.enyo.de>
Newsgroups: gmane.emacs.gnus.general
Subject: Re: cancel locks
Date: Thu, 01 Nov 2001 22:10:27 +0100
Sender: owner-ding@hpc.uh.edu
Message-ID: <87g07yxkn0.fsf@deneb.enyo.de>
References: <ilug07z7lfi.fsf@dhcp128.extundo.com>
	<rjd7323nmx.fsf@ssv2.dina.kvl.dk> <871yji7mik.fsf@deneb.enyo.de>
	<rjvgguzop1.fsf@ssv2.dina.kvl.dk>
	<20011101163409.39F32BD4F@squeaker.lickey.com>
	<m3ofmmie2y.fsf@defun.localdomain>
	<iluzo66pfr1.fsf@dhcp128.extundo.com>
NNTP-Posting-Host: coloc-standby.netfonds.no
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Trace: main.gmane.org 1035175470 30000 80.91.224.250 (21 Oct 2002 04:44:30 GMT)
X-Complaints-To: usenet@main.gmane.org
NNTP-Posting-Date: Mon, 21 Oct 2002 04:44:30 +0000 (UTC)
Return-Path: <owner-ding@hpc.uh.edu>
Original-Received: (qmail 6408 invoked from network); 1 Nov 2001 20:51:10 -0000
Original-Received: from malifon.math.uh.edu (mail@129.7.128.13)
  by mastaler.com with SMTP; 1 Nov 2001 20:51:10 -0000
Original-Received: from sina.hpc.uh.edu ([129.7.128.10] ident=lists)
	by malifon.math.uh.edu with esmtp (Exim 3.20 #1)
	id 15zOmg-00079E-00; Thu, 01 Nov 2001 14:49:54 -0600
Original-Received: by sina.hpc.uh.edu (TLB v0.09a (1.20 tibbs 1996/10/09 22:03:07)); Thu, 01 Nov 2001 14:49:32 -0600 (CST)
Original-Received: from sclp3.sclp.com (qmailr@sclp3.sclp.com [209.196.61.66])
	by sina.hpc.uh.edu (8.9.3/8.9.3) with SMTP id OAA21987
	for <ding@hpc.uh.edu>; Thu, 1 Nov 2001 14:49:00 -0600 (CST)
Original-Received: (qmail 6359 invoked by alias); 1 Nov 2001 20:49:02 -0000
Original-Received: (qmail 6354 invoked from network); 1 Nov 2001 20:49:02 -0000
Original-Received: from mail.s.netic.de (HELO mail.netic.de) (212.9.160.11)
  by gnus.org with SMTP; 1 Nov 2001 20:49:02 -0000
Original-Received: by mail.netic.de (Smail3.2.0.111/mail.s.netic.de)
	via LF.net GmbH Internet Services
	via remoteip 212.9.163.44
	via remotehost mail.enyo.de with esmtp
	for mail.gnus.org
	id m15zOln-001X4qC; Thu, 1 Nov 2001 21:48:59 +0100 (CET)
Original-Received: from [192.168.1.2] (helo=deneb.enyo.de ident=exim)
	by mail.enyo.de with esmtp (Exim 3.12 #1)
	id 15zOjz-00064c-00
	for ding@gnus.org; Thu, 01 Nov 2001 21:47:07 +0100
Original-Received: from fw by deneb.enyo.de with local (Exim 3.12 #1)
	id 15zP6Z-00018E-00
	for ding@gnus.org; Thu, 01 Nov 2001 22:10:27 +0100
Original-To: ding@gnus.org
In-Reply-To: <iluzo66pfr1.fsf@dhcp128.extundo.com> (Simon Josefsson's
 message of "Thu, 01 Nov 2001 18:23:14 +0100")
User-Agent: Gnus/5.090004 (Oort Gnus v0.04) Emacs/21.1 (i686-pc-linux-gnu)
Precedence: list
X-Majordomo: 1.94.jlt7
Original-Lines: 17
Xref: main.gmane.org gmane.emacs.gnus.general:39820
X-Report-Spam: http://spam.gmane.org/gmane.emacs.gnus.general:39820

Simon Josefsson <jas@extundo.com> writes:

> The initial password is generated with the following, better ideas
> welcome.
>
> (defun message-canlock-generate ()
>   "Return a string that is non-trival to guess.
> Do not use this for anything important, it is cryptographically weak."
>   (md5 (concat (message-unique-id)
> 	       (format "%x%x%x" (random) (random t) (random))
> 	       (prin1-to-string (recent-keys))
> 	       (prin1-to-string (garbage-collect)))))

You could hash in the buffer list, too.

It should be documented somewhere that sharing your .emacs file might
expose the canlock "password".