From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: "T.V. Raman" Newsgroups: gmane.emacs.devel Subject: read-passwd: no longer as secure? Date: Sun, 22 Apr 2012 08:53:39 -0700 Message-ID: NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 X-Trace: dough.gmane.org 1335110031 28646 80.91.229.3 (22 Apr 2012 15:53:51 GMT) X-Complaints-To: usenet@dough.gmane.org NNTP-Posting-Date: Sun, 22 Apr 2012 15:53:51 +0000 (UTC) To: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Sun Apr 22 17:53:50 2012 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1SLz6i-0005C5-Qc for ged-emacs-devel@m.gmane.org; Sun, 22 Apr 2012 17:53:48 +0200 Original-Received: from localhost ([::1]:57946 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1SLz6i-0001lB-1S for ged-emacs-devel@m.gmane.org; Sun, 22 Apr 2012 11:53:48 -0400 Original-Received: from eggs.gnu.org ([208.118.235.92]:56354) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1SLz6e-0001kb-RP for emacs-devel@gnu.org; Sun, 22 Apr 2012 11:53:46 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1SLz6c-0001Ah-5j for emacs-devel@gnu.org; Sun, 22 Apr 2012 11:53:44 -0400 Original-Received: from mail-iy0-f169.google.com ([209.85.210.169]:57244) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1SLz6b-0001A1-Ty for emacs-devel@gnu.org; Sun, 22 Apr 2012 11:53:42 -0400 Original-Received: by iajr24 with SMTP id r24so19344335iaj.0 for ; Sun, 22 Apr 2012 08:53:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=Ke98KKDt+AmqvPBQI1QctLX0bQHpXZPfNhU9gj2ECXY=; b=jJnWaM8AVEX+ZFJliERpl8urlwYMv0C56bpu5QMVOcWlUBfjUpeG3vWINf8NoaVliP En19CPbCz8SUfvC2jd9rGyx22cayTHdCFpyNwhDEG/KVCOp8YYLfx1OwkWeOC01dicfV PdbSZg1eQi6hrOIs58Nedua3AucugrkkXHP5TVQZ/ORtQUg/d55JoKmf3afxBSDEteXd qQAPicwZqOiiqa4tszFlqElKXPnAGr4WlgjjOt2fP/BhXWzmbHantVOXyTF6uz+76dHr N1uZl00qqb/77yF6CxLobNgfM1oEM83WxWgkZhPCQmaVOzSy4ba4OfFlrfwnRXwsdHId YNqg== Original-Received: by 10.50.45.197 with SMTP id p5mr4120658igm.20.1335110019286; Sun, 22 Apr 2012 08:53:39 -0700 (PDT) Original-Received: by 10.231.115.77 with HTTP; Sun, 22 Apr 2012 08:53:39 -0700 (PDT) X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 209.85.210.169 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:149943 Spotted this because after a recent git update, I started hearing passwords as I typed in Emacspeak. The move to reimplementing read-passwd using read-string appears to no longer set echo-keystrokes -- but is relying on setting the display property of the char that is displayed to ?. --- though this hides on the display it is still available to most lisp code. I can update emacspeak so it doesn't speak the chars --- but I still feel somewhat uneasy about the read-passwd implementation --- -- --