From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Emanuel Berg via Users list for the GNU Emacs text editor Newsgroups: gmane.emacs.help Subject: Re: Noob dumb question (extending emacs) Date: Sat, 23 Oct 2021 20:17:19 +0200 Message-ID: <87wnm3y5ao.fsf@zoho.eu> References: <86k0i6uoxd.fsf@duenenhof-wilhelm.de> <871r4ernmt.fsf@zoho.eu> <87o87hnrpt.fsf@zoho.eu> <87y26kkuag.fsf@web.de> Reply-To: Emanuel Berg Mime-Version: 1.0 Content-Type: text/plain Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="12630"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/29.0.50 (gnu/linux) To: help-gnu-emacs@gnu.org Cancel-Lock: sha1:b6KVm7Fif8IJkwl9j7uxmILbezc= Original-X-From: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane-mx.org@gnu.org Sat Oct 23 20:21:34 2021 Return-path: Envelope-to: geh-help-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1meLeA-000349-2g for geh-help-gnu-emacs@m.gmane-mx.org; Sat, 23 Oct 2021 20:21:34 +0200 Original-Received: from localhost ([::1]:37780 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1meLe8-0001ma-LO for geh-help-gnu-emacs@m.gmane-mx.org; Sat, 23 Oct 2021 14:21:32 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:55774) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1meLcr-0001Nx-Ti for help-gnu-emacs@gnu.org; Sat, 23 Oct 2021 14:20:13 -0400 Original-Received: from ciao.gmane.io ([116.202.254.214]:42480) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1meLci-0001W5-3T for help-gnu-emacs@gnu.org; Sat, 23 Oct 2021 14:20:13 -0400 Original-Received: from list by ciao.gmane.io with local (Exim 4.92) (envelope-from ) id 1meLcg-0001JK-E7 for help-gnu-emacs@gnu.org; Sat, 23 Oct 2021 20:20:02 +0200 X-Injected-Via-Gmane: http://gmane.org/ Mail-Followup-To: help-gnu-emacs@gnu.org Mail-Copies-To: never Received-SPF: pass client-ip=116.202.254.214; envelope-from=geh-help-gnu-emacs@m.gmane-mx.org; helo=ciao.gmane.io X-Spam_score_int: -15 X-Spam_score: -1.6 X-Spam_bar: - X-Spam_report: (-1.6 / 5.0 requ) BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.25, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-BeenThere: help-gnu-emacs@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Users list for the GNU Emacs text editor List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane-mx.org@gnu.org Original-Sender: "help-gnu-emacs" Xref: news.gmane.io gmane.emacs.help:134060 Archived-At: Michael Heerdegen wrote: > If you use Emacs' `random' to generate a password, an > attacker would need to have access to your system to predict > the result. He would at least have to know exactly when you > started your Emacs session (that time is used to generate > the seed). Or he would need much more pseudo-random numbers > from you. > > Without any of these, no chance to guess, because there are > too many possible pseudo-random numbers when you don't know > at which position in the sequence the generator started. > > But if the attacker already has access to your session, he > can just steal the password out of your Emacs session or > system clipboard or take a screenshot or whatever. > > So I don't see a problem here. Or am I missing something? Well, obviously no one is cracking your account because `random' isn't random enough :) Well, if they do it at a industrial standard level (I didn't see such a standard myself, but I trust Yuri has) there is no reason we shouldn't be there as well ... -- underground experts united https://dataswamp.org/~incal