GNU bug report logs - #45413
Password exposure on SSH login

Previous Next

Full log

View this message in rfc822 format

From: João Távora <joaotavora <at> gmail.com>
To: "Pedro J. V. Mendes" <pedro.mendes <at> ist.utl.pt>
Cc: 45413 <at> debbugs.gnu.org
Subject: bug#45413: Password exposure on SSH login
Date: Fri, 25 Dec 2020 21:59:58 +0000

[Message part 1 (text/plain, inline)]

I'm not 100% sure I follow, but just to underline what I said before: if
the system behaves as expected with -Q but not with
lowercase -q then that clearly points to the system-wide shared
site-start.el file, not the user's init file.

That's because '-q' inhibits the latter, but not the former.

João

On Fri, Dec 25, 2020, 21:46 Pedro J. V. Mendes <pedro.mendes <at> ist.utl.pt>
wrote:

> In my system, only with―from man emacs―“
>              -Q, --quick
>                       Similar  to  "-q --no-site-file --no-splash".  Also,
> avoid processing X re‐
>                       sources.
> ” is the prompt transferred to the minibuffer.
>
> I'll check and tweak the startup configuration.
>
> Thanks!
> On 25/12/20 21:29, João Távora wrote:
>
> When I studied at that university, shared machines were a thing. I didn't
> know if they are still, but I'd also try with:
>
> emacs -q # that's lowercase q
>
> If the problem still happens, it's likely in the site-start.el , and not
> in .emacs
>
>
> https://www.gnu.org/software/emacs/manual/html_node/emacs/Init-File.html#Init-File
>
> João
>
> On Fri, Dec 25, 2020, 20:46 Daniel Martín via Bug reports for GNU Emacs,
> the Swiss army knife of text editors <bug-gnu-emacs <at> gnu.org> wrote:
>
>> "Pedro J. V. Mendes" via "Bug reports for GNU Emacs, the Swiss army
>> knife of text editors" <bug-gnu-emacs <at> gnu.org> writes:
>>
>> > OK, (only) after starting with emacs -Q does the password prompt (and
>> > the focus) appear at the mini-buffer.
>> >
>>
>> Yes, that is expected.  The minibuffer prompt should hide your password
>> with asterisks as you type it.
>>
>> I think this may not be a bug in Emacs, but a problem somewhere in your
>> Emacs configuration.  Comment out parts of your .emacs until you find
>> the culprit.
>>
>>
>>
>>

[Message part 2 (text/html, inline)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.