From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Unknown Newsgroups: gmane.emacs.bugs Subject: bug#45413: Password exposure on SSH login Date: Fri, 25 Dec 2020 02:30:57 +0100 Message-ID: References: <1ef6190e-90eb-4746-8f45-8901d4aa9bd2@ist.utl.pt> Reply-To: =?UTF-8?Q?Reply-to=3A_Daniel_Mart=C3=83=C2=ADn_=3Cmardani29=40yahoo=2Ees?= =?UTF-8?Q?=3E=0A?= Mime-Version: 1.0 Content-Type: text/plain Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="9249"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.1 (darwin) Cc: pedro.mendes@ist.utl.pt To: 45413@debbugs.gnu.org Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Fri Dec 25 02:32:40 2020 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1ksbyB-0002K5-MT for geb-bug-gnu-emacs@m.gmane-mx.org; Fri, 25 Dec 2020 02:32:39 +0100 Original-Received: from localhost ([::1]:40582 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1ksbyA-0007il-OY for geb-bug-gnu-emacs@m.gmane-mx.org; Thu, 24 Dec 2020 20:32:38 -0500 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:57784) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1ksbxa-0007hH-FT for bug-gnu-emacs@gnu.org; Thu, 24 Dec 2020 20:32:02 -0500 Original-Received: from debbugs.gnu.org ([209.51.188.43]:44818) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1ksbxa-0002mG-5l for bug-gnu-emacs@gnu.org; Thu, 24 Dec 2020 20:32:02 -0500 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1ksbxa-0006x5-1o for bug-gnu-emacs@gnu.org; Thu, 24 Dec 2020 20:32:02 -0500 X-Loop: help-debbugs@gnu.org Resent-From: Daniel =?UTF-8?Q?Mart=C3=ADn?= Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Fri, 25 Dec 2020 01:32:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 45413 X-GNU-PR-Package: emacs X-Debbugs-Original-To: "Pedro J. V. Mendes" via "Bug reports for GNU Emacs, the Swiss army knife of text editors" X-Debbugs-Original-Cc: 45413@debbugs.gnu.org, "Pedro J. V. Mendes" Original-Received: via spool by submit@debbugs.gnu.org id=B.160885987926671 (code B ref -1); Fri, 25 Dec 2020 01:32:02 +0000 Original-Received: (at submit) by debbugs.gnu.org; 25 Dec 2020 01:31:19 +0000 Original-Received: from localhost ([127.0.0.1]:56364 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ksbwt-0006w7-3A for submit@debbugs.gnu.org; Thu, 24 Dec 2020 20:31:19 -0500 Original-Received: from lists.gnu.org ([209.51.188.17]:34532) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ksbwr-0006vy-83 for submit@debbugs.gnu.org; Thu, 24 Dec 2020 20:31:17 -0500 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:57566) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1ksbwp-0007c8-VQ for bug-gnu-emacs@gnu.org; Thu, 24 Dec 2020 20:31:16 -0500 Original-Received: from sonic314-20.consmr.mail.ir2.yahoo.com ([77.238.177.146]:42913) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1ksbwg-0002Xx-HW for bug-gnu-emacs@gnu.org; Thu, 24 Dec 2020 20:31:15 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.es; s=s2048; t=1608859861; bh=BU3rudN9DeztWNOuF9o6iUAtp4aOk/EHEzHPd0rPk8I=; h=From:To:Cc:Subject:References:Date:In-Reply-To:From:Subject; b=uaNvvEHOOoPXBH4iuWk9xUUeDvM2tvOwo+Rvq7uWFmrohOxubvLEPkZpkGcpPaSZHWpQ7QYS8iPuUXnRlarK9OKGoHfKMww/+evoBAFcNUFxpAFwLxfiQOZIgEg30DTPH9umHhGxx6S+qQKjj7Kgf29r7gWXFR2jNRNNLoFe79TIfEVt8qBxsnjFWTdede6wWVjqLiqONED2VFR2WZiLbiOs14h08IEP4zbi4h52GY0yXqx7mvxjyzn8YxYFdw1DSy0MHL5YHYxwa431yK49WGIvppm2iPMI7ZH1XsKacE1ad6cVSzDC0N81tfhfWVtjQAsQtKBAzBuvJVpRTbVRyg== X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1608859861; bh=l46c3oke2mid8k4VisJbBXzPStc8tt7dLeEsR1ZVBCi=; h=From:To:Subject:Date:From:Subject; b=Cx692yCT7+r/T6AziHt+SnJFB06CVKBTf/RVYQpaAVyZn+eHjuxLhc/DuGmwQsb0OqG0z4pGZQBoiKmmfJ42mAqY2HsvLscdCnT+3Ve7/gBZcH5lihbwzeuAR9Tolzrl2G/KG7Du+BmUEeD47oyxzj0ryhkJF14UZMC0xNzp7S/O18YmIcpqfkxuGD8+4SuoK9BcGPTQXaVRWUus3cIou49md1RTMEWJaXiWPABd/2ME87nEmsanNLmSesoR7MmhTcKXkQmxX84CnaZcybRafirtwrgJVqqNnLV7rkV6kIN+aqUZ4hNhmsHXyrKsl7/HCH6WEMRUReJT7hzt9lLE0g== X-YMail-OSG: dgC0_V8VM1kIEjt67GCpi2KWr.YFzT.tr5xx1ctjZ3DgXUVP_IWVNRmPmOWAAXO dj1jcM5k2Mz9LHlwZT.Lp36c1_WMjFV9aGMcAF_Bx5mR4DDxncjJ0iEaXukxAGcOp140HOrGQIGZ .q.yjhEeFHTUPI4sZci9Z_s3_CmCX61unZMHcs_I3HMe1Hj79ZfaEH6F8LxVZ0.Vm4iP.P55IepG uoL2Y9U1yLgX_GfPI7dOr8wasMhRDD0XRIiDy_GbQRlMXShPpmFs.4COVdL5QgQrM1WxAq7WZGtP C67Svl_ZgjsCtorHs64FtRZm2tQqicdnTepX2SB9IMrFcGbKdyn3tCeCt_1nmrIXObLVCP1dsQ_x V7CNMbTgWGL_bOGXmHrWlFImP1dDJfWx5I_juBb9pZNSXemP1pU0C.UiQCmoXkBKonY0aHpb2ACZ ws6OAblSQUZXqrj__67pnPFsHjpkTc4.RiFlD0DAJG01JfmDEmEU9Ar7lNFxC5S_tTnE4wQz5YgH omvizR6FwAYP9KA1S6cNXTn2Bvj1lTzMsv5yT5Up8XQGLSq_lRYGvn.ZMPi1rhGqXIGZUlgPtFyo mAFyaJvHEYvztx2taRmJNOjdcoEVT7x3yx85w2IGQBc8jaXufaQ5WF.p.43PgCaDh11iw_Z.OuD9 PnGhOwOgfK0_p8nsaSLg6Figr8r1RTnEHCkArjSa_R67Z..ByZI8IDPXFAzO.6ANCcIMPMgy91J. ToJ_AVL5H0nUIwOFMuSDzRGPSvV2RJ1Xh6sf.nh41sxsTe3dUmFGj4XUrEHLcznBLt2m2LnnMm6J KQGTjHhjz2hqtYdQPsOJmjAuYT1aW6PK4ZwJBJuMKo Original-Received: from sonic.gate.mail.ne1.yahoo.com by sonic314.consmr.mail.ir2.yahoo.com with HTTP; Fri, 25 Dec 2020 01:31:01 +0000 Original-Received: by smtp421.mail.ir2.yahoo.com (VZM Hermes SMTP Server) with ESMTPA ID a0b2c7ed7b674a9ba74df2ee2837ec14; Fri, 25 Dec 2020 01:30:59 +0000 (UTC) In-Reply-To: <1ef6190e-90eb-4746-8f45-8901d4aa9bd2@ist.utl.pt> (Pedro J. V. Mendes's message of "Thu, 24 Dec 2020 23:13:41 +0000") X-Mailer: WebService/1.1.17278 mail.backend.jedi.jws.acl:role.jedi.acl.token.atz.jws.hermes.yahoo Apache-HttpAsyncClient/4.1.4 (Java/11.0.8) Received-SPF: pass client-ip=77.238.177.146; envelope-from=mardani29@yahoo.es; helo=sonic314-20.consmr.mail.ir2.yahoo.com X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Original-Sender: "bug-gnu-emacs" Original-From: Xref: news.gmane.io gmane.emacs.bugs:196669 Archived-At: "Pedro J. V. Mendes" via "Bug reports for GNU Emacs, the Swiss army knife of text editors" writes: > Within , on SSH login (e.g.) to sigma.ist.utl.pt, the > password was > visible during typing and recorded to history (accessible through > M-p). Could you paste how the OpenSSH password prompt looks like in that system? Perhaps we need to update comint-password-prompt-regexp to match it appropriately.