From mboxrd@z Thu Jan 1 00:00:00 1970 Path: main.gmane.org!not-for-mail From: Pavel@Janik.cz (Pavel =?iso-8859-2?q?Jan=EDk?=) Newsgroups: gmane.emacs.devel Subject: Re: many packages write to `temporary-file-directory' insecurely Date: Tue, 19 Mar 2002 07:22:57 +0100 Sender: emacs-devel-admin@gnu.org Message-ID: References: <200203051520.g25FKbw01899@rum.cs.yale.edu> <1015389617.25883.37.camel@space-ghost> <1015400126.18074.0.camel@space-ghost> <200203080908.g28986Z02524@wijiji.santafe.edu> <1015757200.18074.71.camel@space-ghost> <200203110901.g2B91Ej04386@wijiji.santafe.edu> <1016402881.5455.24.camel@space-ghost> <200203182006.g2IK6dB08697@wijiji.santafe.edu> <1016490983.17157.4.camel@space-ghost> <20020318234901.A3377@tardis.ed.ac.uk> NNTP-Posting-Host: localhost.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-15 Content-Transfer-Encoding: quoted-printable X-Trace: main.gmane.org 1016518920 18673 127.0.0.1 (19 Mar 2002 06:22:00 GMT) X-Complaints-To: usenet@main.gmane.org NNTP-Posting-Date: Tue, 19 Mar 2002 06:22:00 +0000 (UTC) Cc: Colin Walters , emacs-devel@gnu.org Original-Received: from quimby.gnus.org ([80.91.224.244]) by main.gmane.org with esmtp (Exim 3.33 #1 (Debian)) id 16nD0S-0004r5-00 for ; Tue, 19 Mar 2002 07:22:00 +0100 Original-Received: from fencepost.gnu.org ([199.232.76.164]) by quimby.gnus.org with esmtp (Exim 3.12 #1 (Debian)) id 16nD5c-0002e2-00 for ; Tue, 19 Mar 2002 07:27:20 +0100 Original-Received: from localhost ([127.0.0.1] helo=fencepost.gnu.org) by fencepost.gnu.org with esmtp (Exim 3.34 #1 (Debian)) id 16nCzo-0000uf-00; Tue, 19 Mar 2002 01:21:20 -0500 Original-Received: from styx.suse.cz ([213.210.157.162] helo=SnowWhite.SuSE.cz) by fencepost.gnu.org with esmtp (Exim 3.34 #1 (Debian)) id 16nCyq-0000pp-00 for ; Tue, 19 Mar 2002 01:20:20 -0500 Original-Received: by SnowWhite.SuSE.cz (PJ, from userid 500) id 1680718967; Tue, 19 Mar 2002 07:22:57 +0100 (CET) Original-To: Steve Kemp Mail-Copies-To: never X-Face: $"d&^B_IKlTHX!y2d,3;grhwjOBqOli]LV`6d]58%5'x/kBd7.MO&n3bJ@Zkf&RfBu|^qL+ ?/Re{MpTqanXS2'~Qp'J2p^M7uM:zp[1Xq#{|C!*'&NvCC[9!|=>#qHqIhroq_S"MH8nSH+d^9*BF: iHiAs(t(~b#1.{w.d[=Z In-Reply-To: <20020318234901.A3377@tardis.ed.ac.uk> (Steve Kemp's message of "Mon, 18 Mar 2002 23:49:01 +0000") Original-Lines: 16 User-Agent: Gnus/5.090006 (Oort Gnus v0.06) Emacs/21.2.50 (i386-suse-linux-gnu) Errors-To: emacs-devel-admin@gnu.org X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.0.5 Precedence: bulk List-Help: List-Post: List-Subscribe: , List-Id: Emacs development discussions. List-Unsubscribe: , List-Archive: Xref: main.gmane.org gmane.emacs.devel:2025 X-Report-Spam: http://spam.gmane.org/gmane.emacs.devel:2025 From: Steve Kemp Date: Mon, 18 Mar 2002 23:49:01 +0000 > But it would appear to have the major flaw that a malicious user > could fake their scores with almost no effort, eg: >=20 > [matrix] skx > update-score --file=3D/var/games/emacs/snake-score --ad= d-score "Steve 99999999999999 points" I do not think we should/could prevent this. Note, that this is possible right now too... --=20 Pavel Jan=EDk Have you considered defenestrating your computer and replacing Windows with GNU/Linux? It is a shame for you to be in bondage to Microsoft. -- Richard Stallman in emacs-devel _______________________________________________ Emacs-devel mailing list Emacs-devel@gnu.org http://mail.gnu.org/mailman/listinfo/emacs-devel