* view-lossage and passwords
@ 2010-02-27 8:41 mandar.mitra
2010-02-27 16:19 ` Andreas Röhler
0 siblings, 1 reply; 4+ messages in thread
From: mandar.mitra @ 2010-02-27 8:41 UTC (permalink / raw)
To: help-gnu-emacs
At various times (e.g. when I am using a terminal) within emacs, I
need to enter my password. This is, by default, stored in my typing
history, and becomes visible with view-lossage. Is there some way to
prevent passwords from being recorded in typing history, so that if I
run view-lossage (usually accidentally), my password won't show up on
screen?
I've looked around on the web a bit, but didn't find anything that
addresses this. Thanks for any tips,
Mandar.
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: view-lossage and passwords
2010-02-27 8:41 view-lossage and passwords mandar.mitra
@ 2010-02-27 16:19 ` Andreas Röhler
2010-02-28 19:33 ` Geralt
0 siblings, 1 reply; 4+ messages in thread
From: Andreas Röhler @ 2010-02-27 16:19 UTC (permalink / raw)
To: help-gnu-emacs
mandar.mitra wrote:
> At various times (e.g. when I am using a terminal) within emacs, I
> need to enter my password. This is, by default, stored in my typing
> history, and becomes visible with view-lossage. Is there some way to
> prevent passwords from being recorded in typing history, so that if I
> run view-lossage (usually accidentally), my password won't show up on
> screen?
>
> I've looked around on the web a bit, but didn't find anything that
> addresses this. Thanks for any tips,
> Mandar.
>
Hi,
that's a bug and security risk IMO. It should never happen.
Please report it: M-x report-emacs-bug
Thanks
Andreas
--
https://code.launchpad.net/~a-roehler/python-mode
https://code.launchpad.net/s-x-emacs-werkstatt/
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: view-lossage and passwords
2010-02-27 16:19 ` Andreas Röhler
@ 2010-02-28 19:33 ` Geralt
2010-03-01 9:35 ` Andreas Röhler
0 siblings, 1 reply; 4+ messages in thread
From: Geralt @ 2010-02-28 19:33 UTC (permalink / raw)
To: Andreas Röhler, Lennart Borgman, mandar.mitra; +Cc: help-gnu-emacs
Hi,
I just used Emacs built-in bug-reporting facility (M-x
report-emacs-bug RET) and among some other information this includes
the lossage, so if passwords are included in the lossage this is
definitely a security bug. I just tried that with Emacs 23.1.1 and I
can't confirm that bug, it looks like the lossage is flushed after the
password prompt finishes.
Geralt.
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2010-03-01 9:35 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2010-02-27 8:41 view-lossage and passwords mandar.mitra
2010-02-27 16:19 ` Andreas Röhler
2010-02-28 19:33 ` Geralt
2010-03-01 9:35 ` Andreas Röhler
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).