From: Marcin Borkowski <mbork@mbork.pl>
To: Michael Albinus <michael.albinus@gmx.de>
Cc: Corwin Brust <corwin@bru.st>, Yuan Cao <yuancao85@gmail.com>,
help-gnu-emacs@gnu.org, John Yates <john@yates-sheets.org>
Subject: Re: Emacs in a Corporate Environment
Date: Sat, 15 Apr 2023 08:10:46 +0200 [thread overview]
Message-ID: <87jzyd65g9.fsf@mbork.pl> (raw)
In-Reply-To: <873552sf7u.fsf@gmx.de>
On 2023-04-14, at 16:36, Michael Albinus <michael.albinus@gmx.de> wrote:
> Marcin Borkowski <mbork@mbork.pl> writes:
>
> Hi Marcin,
>
>>> Hopefully, others will answer and/or help corroborate (or refine) my
>>> answers. Don't be embarrassed. It's embarrassing that
>>
>> I guess some internet beast swallowed the rest of your letter, but
>> I second the message that OP should /not/ be embarrassed. Silly jokes
>> aside, the question is a valid one. In fact, there is one area I am
>> a bit afraid of wrt Emacs & security, and if I may hijack the thread (a
>> bit), let me ask this: if I edit remote files via TRAMP, can I be sure
>> not even partial copy of data from the server ends up on my local drive,
>> e.g. in /tmp?
>
> You can be sure that a copy of your remote data end up in your local
> drive in /tmp. Tramp is busy to clenaup after the operations, but there
> is no guarantee that it will cover everything. And if somebody calls
> `file-local-copy' of a remote file, this ends up in your /tmp by
> intention of the caller.
Thanks for the info. This doesn't look very bad to me, as my `/tmp`
resides in RAM, but still -- good to know. I might want to add cleaning
up `/tmp` to things I do when I leave work.
>> Also, one area one should be probably /very/ careful are packages which
>> save "Emacs session" to disk. If the "session" includes the kill ring,
>> it may happen (/especially/ if one uses TRAMP to edit remote .env files
>> and similar stuff) that some password ends up there, which could be
>> a /very/ serious leakage.
>
> I cannot speak about environment files, but Tramp is very careful about
> passwords. It has delegated password handling completely to
> auth-source.el, which manages all kind of passwords, locally or
> remote. So passwords is not an exclusive Tramp problem.
Sounds good -- but again, I'm talking about e.g. killing and yanking
passwords. I imagine this is less of a problem in "traditional" editors
using the concept of "clipboard" which can hold one item -- but Emacs
has the kill ring which has a long memory...
I sometimes use `browse-kill-ring` to clear it, and I don't use any
"session saving", but this is something that I think needs to be taken
into account.
Best,
--
Marcin Borkowski
http://mbork.pl
next prev parent reply other threads:[~2023-04-15 6:10 UTC|newest]
Thread overview: 31+ messages / expand[flat|nested] mbox.gz Atom feed top
2023-04-12 19:48 Emacs in a Corporate Environment Yuan Cao
2023-04-12 20:10 ` Corwin Brust
2023-04-12 20:48 ` John Yates
2023-04-12 21:33 ` Yuan Cao
2023-04-13 0:08 ` Corwin Brust
2023-04-13 14:35 ` Marcin Borkowski
2023-04-14 14:36 ` Michael Albinus
2023-04-14 14:52 ` Eli Zaretskii
2023-04-14 15:08 ` Óscar Fuentes
2023-04-14 15:47 ` Eli Zaretskii
2023-04-14 16:11 ` tomas
2023-04-15 6:12 ` Marcin Borkowski
2023-04-15 7:31 ` tomas
2023-04-15 9:12 ` Marcin Borkowski
2023-04-15 6:11 ` Marcin Borkowski
2023-04-15 7:17 ` Eli Zaretskii
2023-04-15 7:34 ` tomas
2023-04-15 7:59 ` Eli Zaretskii
2023-04-15 8:21 ` tomas
2023-04-15 9:41 ` Eli Zaretskii
2023-04-15 11:16 ` Po Lu
2023-04-15 12:04 ` Marcin Borkowski
2023-04-15 12:18 ` Ruijie Yu via Users list for the GNU Emacs text editor
2023-04-15 13:22 ` tomas
2023-04-15 18:45 ` Michael Albinus
2023-04-15 6:10 ` Marcin Borkowski [this message]
2023-04-15 21:14 ` Björn Bidar
2023-04-16 7:51 ` Michael Albinus
2023-04-13 14:23 ` Marcin Borkowski
2023-04-13 17:23 ` Yuan Cao
2023-04-12 20:52 ` Jean Louis
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
List information: https://www.gnu.org/software/emacs/
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=87jzyd65g9.fsf@mbork.pl \
--to=mbork@mbork.pl \
--cc=corwin@bru.st \
--cc=help-gnu-emacs@gnu.org \
--cc=john@yates-sheets.org \
--cc=michael.albinus@gmx.de \
--cc=yuancao85@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).