From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Marcin Borkowski Newsgroups: gmane.emacs.bugs Subject: bug#20910: 24.4; *shell* write the password in clear in the buffer on git push Date: Sat, 23 Apr 2016 10:45:49 +0200 Message-ID: <87potgsog2.fsf@amu.edu.pl> References: <87mvzlr55n.fsf@xload.home> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1461401186 10770 80.91.229.3 (23 Apr 2016 08:46:26 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Sat, 23 Apr 2016 08:46:26 +0000 (UTC) Cc: aurelien , 20910@debbugs.gnu.org To: Stefan Monnier Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Sat Apr 23 10:46:12 2016 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1attCe-0002Kl-07 for geb-bug-gnu-emacs@m.gmane.org; Sat, 23 Apr 2016 10:46:12 +0200 Original-Received: from localhost ([::1]:49717 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1attCd-0007i6-I3 for geb-bug-gnu-emacs@m.gmane.org; Sat, 23 Apr 2016 04:46:11 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:42333) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1attCZ-0007eY-QB for bug-gnu-emacs@gnu.org; Sat, 23 Apr 2016 04:46:08 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1attCV-0003iq-4k for bug-gnu-emacs@gnu.org; Sat, 23 Apr 2016 04:46:07 -0400 Original-Received: from debbugs.gnu.org ([208.118.235.43]:59484) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1attCU-0003iQ-QX for bug-gnu-emacs@gnu.org; Sat, 23 Apr 2016 04:46:03 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1attCU-0003nw-4a for bug-gnu-emacs@gnu.org; Sat, 23 Apr 2016 04:46:02 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Marcin Borkowski Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Sat, 23 Apr 2016 08:46:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 20910 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: moreinfo Original-Received: via spool by 20910-submit@debbugs.gnu.org id=B20910.146140116014615 (code B ref 20910); Sat, 23 Apr 2016 08:46:02 +0000 Original-Received: (at 20910) by debbugs.gnu.org; 23 Apr 2016 08:46:00 +0000 Original-Received: from localhost ([127.0.0.1]:43588 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1attCR-0003ne-Tp for submit@debbugs.gnu.org; Sat, 23 Apr 2016 04:46:00 -0400 Original-Received: from pp.amu.edu.pl ([150.254.65.67]:40554) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1attCQ-0003nW-2D for 20910@debbugs.gnu.org; Sat, 23 Apr 2016 04:45:58 -0400 Original-Received: from localhost (pp.amu.edu.pl [127.0.0.1]) by pp.amu.edu.pl (Postfix) with ESMTP id C9D08AA080; Sat, 23 Apr 2016 10:45:56 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=amu.edu.pl; h= content-type:content-type:mime-version:user-agent:message-id :in-reply-to:date:date:references:subject:subject:from:from :received:received; s=pp; t=1461401156; x=1463215557; bh=pN54GAX liEjdZj5bU16Qc7UpPLwTDHidznrm6BKZnmM=; b=0/N51JC9afU/kNNa0wNsICQ VaNRwdUI5Wb06YzzreiH68XKIxa2+jp39RPvlU8SFm6eqj3/HWvC2bfS+6Gqjh/4 njpb4n4+y9qMcn0cOF7kl6KelpsNdxa7Vhtj/hv8tt13DuB8tcTTXZ7Khu+eFyej 9Ciai13VMtfNTZNUoDto= X-Virus-Scanned: amavisd-new at amu.edu.pl Original-Received: from pp.amu.edu.pl ([127.0.0.1]) by localhost (pp.amu.edu.pl [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id RYomo_VMxg_L; Sat, 23 Apr 2016 10:45:56 +0200 (CEST) Original-Received: from localhost (98-171.echostar.pl [213.156.98.171]) by pp.amu.edu.pl (Postfix) with ESMTPSA id 081D8AA072; Sat, 23 Apr 2016 10:45:55 +0200 (CEST) In-Reply-To: (Stefan Monnier's message of "Sat, 27 Jun 2015 10:51:13 -0400") User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.1.50 (gnu/linux) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 208.118.235.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.org gmane.emacs.bugs:116695 Archived-At: On 2015-06-27, at 10:51, Stefan Monnier wrote: >> M-x shell >> git add mysupersoftware.py >> git commit -m "pay attention of the pep8 thanks M-x py-pep8-run" >> git push >> shell $ request for the password of the git, and print it in clear in >> the buffer > > Can you show us the actual password prompt (which is the only info that > Emacs gets that a password is being requested, so it needs to recognize > it, and those prompts change with language settings and stuff, so it's > very heuristic and messy). I suspect that this might depend on Git version and configuration, and things like gpg-agent. In my case, it displayed a window (in WM sense, not in Emacs sense) asking for password, and only after clicking "Cancel", it asked within Emacs. The prompt was: Password for 'https://mbork@github.com': and indeed the characters of the password were visible. > Stefan Best, -- Marcin