From: Lars Ingebrigtsen <larsi@gnus.org>
To: 37196@debbugs.gnu.org
Subject: bug#37196: 27.0.50; auth-source no longer obfuscates passwords
Date: Tue, 27 Aug 2019 12:29:43 +0200 [thread overview]
Message-ID: <87woey2960.fsf@gnus.org> (raw)
Emacs got a better pretty printer for compiled code sometime over the
last few years, and that means that the obfuscator that auth-source uses
no longer works. (It puts the password into a closure.)
With the following in ~/.authinfo
machine foo.bar login zot password foobar
we get
(auth-source-search :max 1 :host "foo.bar")
=> ((:host "foo.bar" :user "zot" :secret #[0 "<binary>" [("foobar") (nil)] 3]))
with the "foobar" clearly printed out. This should be fixed by
obfuscating the password in a different way.
Similarly, the printed representation of auth-source-netrc-cache also
has the password in clear text now.
In GNU Emacs 27.0.50 (build 27, x86_64-pc-linux-gnu, GTK+ Version 3.22.11)
of 2019-08-23 built on marnie
Repository revision: b4065de33cf397b80e15c22740d34b4a03cfdc17
Repository branch: master
Windowing system distributor 'The X.Org Foundation', version 11.0.11902000
System Description: Debian GNU/Linux 9 (stretch)
--
(domestic pets only, the antidote for overdose, milk.)
bloggy blog: http://lars.ingebrigtsen.no
next reply other threads:[~2019-08-27 10:29 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2019-08-27 10:29 Lars Ingebrigtsen [this message]
2019-09-20 20:05 ` bug#37196: 27.0.50; auth-source no longer obfuscates passwords Lars Ingebrigtsen
2019-09-20 20:13 ` Lars Ingebrigtsen
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=87woey2960.fsf@gnus.org \
--to=larsi@gnus.org \
--cc=37196@debbugs.gnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this external index
https://git.savannah.gnu.org/cgit/emacs.git
https://git.savannah.gnu.org/cgit/emacs/org-mode.git
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.