From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id uICQBK3cvV8pMAAA0tVLHw (envelope-from ) for ; Wed, 25 Nov 2020 04:25:17 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id aMkoAK3cvV/WAwAA1q6Kng (envelope-from ) for ; Wed, 25 Nov 2020 04:25:17 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 427329404C8 for ; Wed, 25 Nov 2020 04:25:16 +0000 (UTC) Received: from localhost ([::1]:51928 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1khmMk-0003Tf-6O for larch@yhetil.org; Tue, 24 Nov 2020 23:25:14 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:39848) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1khmLt-0003Ke-7y for emacs-orgmode@gnu.org; Tue, 24 Nov 2020 23:24:21 -0500 Received: from static.rcdrun.com ([95.85.24.50]:51825) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1khmLr-0003ke-Im for emacs-orgmode@gnu.org; Tue, 24 Nov 2020 23:24:20 -0500 Received: from localhost ([::ffff:41.202.241.56]) (AUTH: PLAIN admin, TLS: TLS1.2,256bits,ECDHE_RSA_AES_256_GCM_SHA384) by static.rcdrun.com with ESMTPSA id 00000000002C1AF3.000000005FBDDC71.00002A9C; Wed, 25 Nov 2020 04:24:17 +0000 Date: Tue, 24 Nov 2020 21:58:08 +0300 From: Jean Louis To: "Dr. Arne Babenhauserheide" Subject: Re: One vs many directories Message-ID: References: <87mtz84om9.fsf@localhost> <87ft4zhyuo.fsf@disroot.org> <877dqbhtgf.fsf@ucl.ac.uk> <87zh36d1xn.fsf@web.de> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <87zh36d1xn.fsf@web.de> User-Agent: Mutt/2.0 (3d08634) (2020-11-07) Received-SPF: pass client-ip=95.85.24.50; envelope-from=bugs@gnu.support; helo=static.rcdrun.com X-Spam_score_int: -2 X-Spam_score: -0.3 X-Spam_bar: / X-Spam_report: (-0.3 / 5.0 requ) BAYES_00=-1.9, DATE_IN_PAST_06_12=1.543, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_FILL_THIS_FORM_SHORT=0.01 autolearn=no autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-orgmode@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "General discussions about Org-mode." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Diego Zamboni , Texas Cyberthal , emacs-orgmode@gnu.org, Ihor Radchenko Errors-To: emacs-orgmode-bounces+larch=yhetil.org@gnu.org Sender: "Emacs-orgmode" X-Scanner: ns3122888.ip-94-23-21.eu Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of emacs-orgmode-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=emacs-orgmode-bounces@gnu.org X-Spam-Score: 0.49 X-TUID: RCr31Dmx+U7D * Dr. Arne Babenhauserheide [2020-11-24 21:51]: > > Jean Louis writes: > >> The start of the local variables list should be no more than 3000 > >> > characters from the end of the file > >> > >> > >> Given the length of the email, I guess this is why Emacs saw the variables > >> as being within the correct range. > > > > Yes thank you. I was thinking Emacs will do that only in files where > > it recognizes some comments or no comments and that variables need > > to be pretty down in the file, on the bottom. Now I learn it is not > > so. > > > > That is security issue. > > Why is it a security issue? The variables do need to be close to the end > — 3000 characters is only about 50 lines. Emacs users, Org users on our mailing lists are not so private. Their names and email addresses are in the public database. Spammer can construct phishing type of an email, including something like Org news or something and send such email to users. Among let us say 3000 people there will be percentage of users that will say Y to invoke the local variables due to lack of knowing what is it doing to computer. After that, anything becomes possible, including intrusion into computer, capturing all email addresses, passwords, sending spam emails from computer and so on.