From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: "Pedro J. V. Mendes" via "Bug reports for GNU Emacs, the Swiss army knife of text editors" Newsgroups: gmane.emacs.bugs Subject: bug#45413: Password exposure on SSH login Date: Fri, 25 Dec 2020 21:45:36 +0000 Message-ID: <16982cdd-ca9c-4210-5a49-e30ee70d549f@ist.utl.pt> References: <1ef6190e-90eb-4746-8f45-8901d4aa9bd2@ist.utl.pt> <809655bd-59b7-16cc-1cb3-f45608315e44@ist.utl.pt> <5850c628-143a-4312-2fb1-b3c861a4d044@ist.utl.pt> Reply-To: "Pedro J. V. Mendes" Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="------------09AACEA8CCD0FDD3011EDC6D" Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="16634"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0 Cc: 45413@debbugs.gnu.org To: =?UTF-8?Q?Jo=C3=A3o_?= =?UTF-8?Q?T=C3=A1vora?= Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Fri Dec 25 22:47:32 2020 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1ksuvr-00047o-Jc for geb-bug-gnu-emacs@m.gmane-mx.org; Fri, 25 Dec 2020 22:47:32 +0100 Original-Received: from localhost ([::1]:33428 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1ksuvq-0000pY-37 for geb-bug-gnu-emacs@m.gmane-mx.org; Fri, 25 Dec 2020 16:47:30 -0500 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:51026) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1ksuvO-0000pN-QJ for bug-gnu-emacs@gnu.org; Fri, 25 Dec 2020 16:47:02 -0500 Original-Received: from debbugs.gnu.org ([209.51.188.43]:46777) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1ksuvO-0001Ly-Io for bug-gnu-emacs@gnu.org; Fri, 25 Dec 2020 16:47:02 -0500 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1ksuvO-0001Cc-HL for bug-gnu-emacs@gnu.org; Fri, 25 Dec 2020 16:47:02 -0500 X-Loop: help-debbugs@gnu.org Resent-From: "Pedro J. V. Mendes" Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Fri, 25 Dec 2020 21:47:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 45413 X-GNU-PR-Package: emacs Original-Received: via spool by 45413-submit@debbugs.gnu.org id=B45413.16089328084598 (code B ref 45413); Fri, 25 Dec 2020 21:47:02 +0000 Original-Received: (at 45413) by debbugs.gnu.org; 25 Dec 2020 21:46:48 +0000 Original-Received: from localhost ([127.0.0.1]:58323 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ksuv9-0001C5-R8 for submit@debbugs.gnu.org; Fri, 25 Dec 2020 16:46:48 -0500 Original-Received: from smtp1.tecnico.ulisboa.pt ([193.136.128.21]:55878) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ksuv6-0001Bq-61 for 45413@debbugs.gnu.org; Fri, 25 Dec 2020 16:46:46 -0500 Original-Received: from localhost (localhost.localdomain [127.0.0.1]) by smtp1.tecnico.ulisboa.pt (Postfix) with ESMTP id E350A606EC00; Fri, 25 Dec 2020 21:46:40 +0000 (WET) X-Virus-Scanned: by amavisd-new-2.11.0 (20160426) (Debian) at tecnico.ulisboa.pt Original-Received: from smtp1.tecnico.ulisboa.pt ([127.0.0.1]) by localhost (smtp1.tecnico.ulisboa.pt [127.0.0.1]) (amavisd-new, port 10025) with LMTP id 3Ur9P99rP-S9; Fri, 25 Dec 2020 21:46:37 +0000 (WET) Original-Received: from mail1.tecnico.ulisboa.pt (mail1.ist.utl.pt [IPv6:2001:690:2100:1::b3dd:b9ac]) by smtp1.tecnico.ulisboa.pt (Postfix) with ESMTPS id BDC386EEC161; Fri, 25 Dec 2020 21:46:37 +0000 (WET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ist.utl.pt; s=mail; t=1608932797; bh=RL3boI5WBKqASzwq8pUpVBgFOBNOoID4qMEl+2KdO+I=; h=Subject:To:References:From:Cc:Date:In-Reply-To; b=db4FePwpzF1BhyrNvcy8nSv97j00HfOq5fGWuxK6cHrJoDv86rKcQ1f7NCTcKm4HQ eYRcCzzd5io4Vjl+YeybaigrSiE7tR+CjW5hcziN5wp4PTwHt3KORfKpE2aPtTSxKv rl7PW5JJJwQXlKaIBCX6MFO6IWButbY2jdOz8A7Y= Original-Received: from [192.168.1.73] (145.144.115.89.rev.vodafone.pt [89.115.144.145]) (Authenticated sender: ist136585) by mail1.tecnico.ulisboa.pt (Postfix) with ESMTPSA id 9D0C3360309; Fri, 25 Dec 2020 21:46:37 +0000 (WET) In-Reply-To: Content-Language: en-US X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.io gmane.emacs.bugs:196728 Archived-At: This is a multi-part message in MIME format. --------------09AACEA8CCD0FDD3011EDC6D Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit In my system, only with―from man emacs―“             -Q, --quick                       Similar  to  "-q --no-site-file --no-splash".  Also, avoid processing X re‐                       sources. ” is the prompt transferred to the minibuffer. I'll check and tweak the startup configuration. Thanks! On 25/12/20 21:29, João Távora wrote: > When I studied at that university, shared machines were a thing. I > didn't know if they are still, but I'd also try with: > > emacs -q # that's lowercase q > > If the problem still happens, it's likely in the site-start.el , and > not in .emacs > > https://www.gnu.org/software/emacs/manual/html_node/emacs/Init-File.html#Init-File > > João > > On Fri, Dec 25, 2020, 20:46 Daniel Martín via Bug reports for GNU > Emacs, the Swiss army knife of text editors > wrote: > > "Pedro J. V. Mendes" via "Bug reports for GNU Emacs, the Swiss army > knife of text editors" > writes: > > > OK, (only) after starting with emacs -Q does the password prompt > (and > > the focus) appear at the mini-buffer. > > > > Yes, that is expected.  The minibuffer prompt should hide your > password > with asterisks as you type it. > > I think this may not be a bug in Emacs, but a problem somewhere in > your > Emacs configuration.  Comment out parts of your .emacs until you find > the culprit. > > > --------------09AACEA8CCD0FDD3011EDC6D Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit

In my system, only with―from man emacs―“
             -Q, --quick
                      Similar  to  "-q --no-site-file --no-splash".  Also, avoid processing X re‐
                      sources.
” is the prompt transferred to the minibuffer.

I'll check and tweak the startup configuration.

Thanks!

On 25/12/20 21:29, João Távora wrote:
When I studied at that university, shared machines were a thing. I didn't know if they are still, but I'd also try with:

emacs -q # that's lowercase q

If the problem still happens, it's likely in the site-start.el , and not in .emacs


João

On Fri, Dec 25, 2020, 20:46 Daniel Martín via Bug reports for GNU Emacs, the Swiss army knife of text editors <bug-gnu-emacs@gnu.org> wrote:
"Pedro J. V. Mendes" via "Bug reports for GNU Emacs, the Swiss army
knife of text editors" <bug-gnu-emacs@gnu.org> writes:

> OK, (only) after starting with emacs -Q does the password prompt (and
> the focus) appear at the mini-buffer.
>

Yes, that is expected.  The minibuffer prompt should hide your password
with asterisks as you type it.

I think this may not be a bug in Emacs, but a problem somewhere in your
Emacs configuration.  Comment out parts of your .emacs until you find
the culprit.



--------------09AACEA8CCD0FDD3011EDC6D--