From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/72159 Path: news.gmane.org!not-for-mail From: Lars Magne Ingebrigtsen Newsgroups: gmane.emacs.gnus.general Subject: Re: Password protection Date: Wed, 29 Sep 2010 16:04:13 +0200 Organization: Programmerer Ingebrigtsen Message-ID: References: NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: dough.gmane.org 1285769140 14521 80.91.229.12 (29 Sep 2010 14:05:40 GMT) X-Complaints-To: usenet@dough.gmane.org NNTP-Posting-Date: Wed, 29 Sep 2010 14:05:40 +0000 (UTC) To: ding@gnus.org Original-X-From: ding-owner+M20532@lists.math.uh.edu Wed Sep 29 16:05:35 2010 Return-path: Envelope-to: ding-account@gmane.org Original-Received: from util0.math.uh.edu ([129.7.128.18]) by lo.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1P0xHk-0005tI-QM for ding-account@gmane.org; Wed, 29 Sep 2010 16:05:29 +0200 Original-Received: from localhost ([127.0.0.1] helo=lists.math.uh.edu) by util0.math.uh.edu with smtp (Exim 4.63) (envelope-from ) id 1P0xHY-0001Ru-Gt; Wed, 29 Sep 2010 09:05:16 -0500 Original-Received: from mx2.math.uh.edu ([129.7.128.33]) by util0.math.uh.edu with esmtps (TLSv1:AES256-SHA:256) (Exim 4.63) (envelope-from ) id 1P0xHW-0001Rd-NX for ding@lists.math.uh.edu; Wed, 29 Sep 2010 09:05:14 -0500 Original-Received: from quimby.gnus.org ([80.91.231.51]) by mx2.math.uh.edu with esmtp (Exim 4.72) (envelope-from ) id 1P0xHO-0005Bq-Pb for ding@lists.math.uh.edu; Wed, 29 Sep 2010 09:05:14 -0500 Original-Received: from lo.gmane.org ([80.91.229.12]) by quimby.gnus.org with esmtp (Exim 3.36 #1 (Debian)) id 1P0xHN-0001YP-00 for ; Wed, 29 Sep 2010 16:05:05 +0200 Original-Received: from list by lo.gmane.org with local (Exim 4.69) (envelope-from ) id 1P0xHL-0005iQ-RU for ding@gnus.org; Wed, 29 Sep 2010 16:05:03 +0200 Original-Received: from cm-84.215.34.171.getinternet.no ([84.215.34.171]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 29 Sep 2010 16:05:03 +0200 Original-Received: from larsi by cm-84.215.34.171.getinternet.no with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 29 Sep 2010 16:05:03 +0200 X-Injected-Via-Gmane: http://gmane.org/ Mail-Followup-To: ding@gnus.org Original-Lines: 16 Original-X-Complaints-To: usenet@dough.gmane.org X-Gmane-NNTP-Posting-Host: cm-84.215.34.171.getinternet.no Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAAD1BMVEUOCgkUDw4RDQwQCwtJ RUJbfo3SAAACgklEQVQ4jUVUgbEjOwgjcQMP2wWsIQXYcAV873P/NX1pczOXZDKJZZAQsFKG/ntZ rZ7h06qLW0mzMUwVXz7TM2eaS8WpVRtq+OF+MSJxIFot3VrEFJmSCJhBUJAYOOLTpUixgnPzYgQU uXE3pZRYIBmj2iWPGhBlgKOSqA6tYfKo/fIjtFb7q5tAxR2oWrheEUTZSg4kAmbm1DGIIsofDl/8 GqxDUa2725ejaXXGIOAXzDz/AhWCq9ZM64SbwZWH46uM96DPw+iGUJ4rbImMtJt1wMK8hAa8w1Bx xrVu8/6Gu0hVMq/MVasi4AO124LWiQfeyjJh6kbeg2SAZCE5OIy+QKnpZoc8BHXWv40FYD4OS08T SBgUbAqZ/H2MPYTcQXs6OzBblLCTJUtxeSRAe0qujjM7d5b5dnB4jBYp0crve0p8tp5LkIoFm83x 5+57/yDm7JO+UHnQuDxn9nMOGn+QLAGwUejr2XMdVQzL55xWliSrMjvnyviPo6WdQAEA8fWD8IDX sA75Ts2QwfOK5GHRUJpPAPBMnmnq57bQ+sOKGbLrEPYVAWj5p+rZHWLxajARTuEf5mbDTOYnoFS1 GxjMV2tjysj5AC+BAwywHNaW/ujPA+whfY9+FAvS2ZDNa+QgoP1uGL++O2fv9QTMF4GDRkWOrfv0 1k/23mQJru1n2D/kxOfOV9JE9vrZFzChEE0FC4aVqdQd7lguzPpoE5zoKIZ63EjTNQN3Zr9Tlq0t 7IflZx+/BiZks/tY3tGexbG+z5vLlEs7ipXasYPo3mz1tzjWAvEIMpHXE3Fd/aOLW8IJa1IuDAsA CPqA11iNYimcD4/1fQBgcP49mwb2IK7/AV4jmo5/rdssAAAAAElFTkSuQmCC Mail-Copies-To: never X-Now-Playing: Japan's _Oil On Canvas (2)_: "Canton" User-Agent: Gnus/5.110011 (No Gnus v0.11) Emacs/24.0.50 (gnu/linux) Cancel-Lock: sha1:iLw5WLtBmMdbIufcae+hHzuv3uI= X-Spam-Score: -0.4 (/) List-ID: Precedence: bulk Xref: news.gmane.org gmane.emacs.gnus.general:72159 Archived-At: Julien Danjou writes: > If the process run by the Lisp code is `cat > file', Lisp code reading > file will get the password, won't it? Sure. It's as easy to get passwords out of Firefox. (Well, almost. Everything is easier with Lisp. :-) Probably the main gain from pushing the passwords down into the C layer is that the passwords will never appear in any Lisp backtraces, or any logs, or anything like that. Inadvertent password disclosure in the current Emacs is a real problem. -- (domestic pets only, the antidote for overdose, milk.) larsi@gnus.org * Lars Magne Ingebrigtsen