password visibility for encfs in eshell

password visibility for encfs in eshell

[Michael Eliachevitch]

Hi.

I'm using the free program encfs for data encryption. I usually use it
through the terminal, but I recently started using the eshell for more
and more stuff. However, when I use the encfs command and it asks me for
a password and I type in the password, in the eshell (and also
M-x-shell) the password is visible in plaintext. I don't have that in a
"normal" terminal. And after the password has been confirmed, it stays
visible in the buffer. Not sure if this is a bug or just a
not-yet-implemented feature, that's why I thought I would ask here first
before reporting a bug or anything similar. Maybe it's even a bug in
encfs, then I am wrong here...

So: Is there anything I can do so that the password isn't visible while
typing it in? And is there anything I can do to "refresh" the buffer so
that I stay in the same folder in the eshell, but with my history (and
the cleartext passwords) being deleted? What I do is "C-x k M-x eshell",
but there has to be a better way. "C-l C-l" just scrolls down.

Be nice please, I am new to this mailing list.

Michael

Re: password visibility for encfs in eshell

[Stefan Monnier]

> visible in the buffer. Not sure if this is a bug or just a
> not-yet-implemented feature, that's why I thought I would ask here first

That would be a bug in Eshell.


        Stefan

Re: password visibility for encfs in eshell

[Michael Albinus]

Stefan Monnier <monnier@iro.umontreal.ca> writes:

>> visible in the buffer. Not sure if this is a bug or just a
>> not-yet-implemented feature, that's why I thought I would ask here first
>
> That would be a bug in Eshell.

Eshell uses the `eshell-watch-for-password-prompt' filter, which uses
`eshell-password-prompt-regexp' for password prompt detection.

This variable has been changed recently to be derived from
`password-word-equivalents'; chances are good that in Emacs 24.4 it
works out of the box.

However, it might be useful to see an example eshell session which
doesn't hide the password, in order to check. The example should be
faked with ****** as password, of course :-)

Which Emacs version are you using, btw?

Best regards, Michael.

Re: password visibility for encfs in eshell

[Michael Eliachevitch]

The output of <M-x version>:

"GNU Emacs 24.3.1 (x86_64-pc-linux-gnu, GTK+ Version 3.8.6) of
2013-12-22 on brahms, modified by Debian"

I use Debian Jessie (the current testing) and use the emacs24 package
from the testing repos and I use encfs in the version 1.7.3.

What should be notet, though, is that I use German debian repos, so the
password prompt used the German word "EncFS-Passwort:" If I had known
earlier that eshell uses a regex for password promt detection, I would
have mentioned that earlier. When I have some time I'll try version 24.4
or tinker with the regex. Just recently learned regular expressions ;)

Greetings, Michael.



On 30.01.2014 11:28, Michael Albinus wrote:
> Stefan Monnier <monnier@iro.umontreal.ca> writes:
> 
>>> visible in the buffer. Not sure if this is a bug or just a
>>> not-yet-implemented feature, that's why I thought I would ask here first
>>
>> That would be a bug in Eshell.
> 
> Eshell uses the `eshell-watch-for-password-prompt' filter, which uses
> `eshell-password-prompt-regexp' for password prompt detection.
> 
> This variable has been changed recently to be derived from
> `password-word-equivalents'; chances are good that in Emacs 24.4 it
> works out of the box.
> 
> However, it might be useful to see an example eshell session which
> doesn't hide the password, in order to check. The example should be
> faked with ****** as password, of course :-)
> 
> Which Emacs version are you using, btw?
> 
> Best regards, Michael.
> 

Re: password visibility for encfs in eshell

[Michael Eliachevitch]

Changing the eshell-password-prompt-regexp to

"[Pp]ass\(wor[dt]\|phrase\).*:\s *\'"

worked, just changed the "d" to "[dt]". Thanks.



On 30.01.2014 11:28, Michael Albinus wrote:
> Stefan Monnier <monnier@iro.umontreal.ca> writes:
> 
>>> visible in the buffer. Not sure if this is a bug or just a
>>> not-yet-implemented feature, that's why I thought I would ask here first
>>
>> That would be a bug in Eshell.
> 
> Eshell uses the `eshell-watch-for-password-prompt' filter, which uses
> `eshell-password-prompt-regexp' for password prompt detection.
> 
> This variable has been changed recently to be derived from
> `password-word-equivalents'; chances are good that in Emacs 24.4 it
> works out of the box.
> 
> However, it might be useful to see an example eshell session which
> doesn't hide the password, in order to check. The example should be
> faked with ****** as password, of course :-)
> 
> Which Emacs version are you using, btw?
> 
> Best regards, Michael.
> 

Re: password visibility for encfs in eshell

[Michael Albinus]

Michael Eliachevitch <m.eliachevitch@gmx.net> writes:

> What should be notet, though, is that I use German debian repos, so the
> password prompt used the German word "EncFS-Passwort:" If I had known
> earlier that eshell uses a regex for password promt detection, I would
> have mentioned that earlier. When I have some time I'll try version 24.4
> or tinker with the regex. Just recently learned regular expressions ;)

Well, localized password strings have been added very
recently. "passwort" belongs to `password-word-equivalents'.

I've installed encfs on my Ubuntu machine, and I have tried it in a
German environment with eshell. The password for "EncFS-Passwort:"
hasn't been echoed.

Have fun with Emacs 24.4! With Emacs 24.3, you could fix it with this:

(setq eshell-password-prompt-regexp "[Pp]ass\\(word\\|wort\\|phrase\\).*:\\s *\\'")

> Greetings, Michael.

Best regards, Michael.

Re: password visibility for encfs in eshell

[Michael Albinus]

Michael Eliachevitch <m.eliachevitch@gmx.net> writes:

> Changing the eshell-password-prompt-regexp to
>
> "[Pp]ass\(wor[dt]\|phrase\).*:\s *\'"
>
> worked, just changed the "d" to "[dt]". Thanks.

Well, in order to make you happy, here's the value in Emacs 24.3.50 :-)

--8<---------------cut here---------------start------------->8---
eshell-password-prompt-regexp is a variable defined in `esh-mode.el'.
Its value is
"\\(\\(?:adgangskode\\|contrase\\(?:\\(?:ny\\|ñ\\)a\\)\\|geslo\\|h\\(?:\\(?:asł\\|esl\\)o\\)\\|iphasiwedi\\|jelszó\\|l\\(?:ozinka\\|ösenord\\)\\|m\\(?:ot de passe\\|ật khẩu\\)\\|pa\\(?:rola\\|s\\(?:ahitza\\|s\\(?: phrase\\|ord\\|phrase\\|wor[dt]\\)\\|vorto\\)\\)\\|s\\(?:alasana\\|enha\\|laptažodis\\)\\|wachtwoord\\|лозинка\\|пароль\\|ססמה\\|كلمة السر\\|गुप्तशब्द\\|शब्दकूट\\|গুপ্তশব্দ\\|পাসওয়ার্ড\\|ਪਾਸਵਰਡ\\|પાસવર્ડ\\|ପ୍ରବେଶ ସଙ୍କେତ\\|கடவுச்சொல்\\|సంకేతపదము\\|ಗುಪ್ತಪದ\\|അടയാളവാക്ക്\\|රහස්පදය\\|ពាក្យសម្ងាត់\\|パスワード\\|密[码碼]\\|암호\\)\\).*:\\s *\\'"
--8<---------------cut here---------------end--------------->8---

Have fun!

Best regards, Michael.