GNU bug report logs - #45413
Password exposure on SSH login

Previous Next

Full log

View this message in rfc822 format

From: "Pedro J. V. Mendes" <pedro.mendes <at> ist.utl.pt>
To: João Távora <joaotavora <at> gmail.com>
Cc: 45413 <at> debbugs.gnu.org
Subject: bug#45413: Password exposure on SSH login
Date: Fri, 25 Dec 2020 22:19:31 +0000

[Message part 1 (text/plain, inline)]

Thanks for the distinction and clarification. By thw way, I've just find 
that such issue occurs only with GUI Emacs! With Emacs running within a 
terminal (Konsole) everything works as expected, i.e. without any 
command-line arguments (oher than -nw) the prompt is transferred to the 
minibuffer.

On 25/12/20 21:59, João Távora wrote:
> I'm not 100% sure I follow, but just to underline what I said before: 
> if the system behaves as expected with -Q but not with
> lowercase -q then that clearly points to the system-wide shared 
> site-start.el file, not the user's init file.
>
> That's because '-q' inhibits the latter, but not the former.
>
> João
>
> On Fri, Dec 25, 2020, 21:46 Pedro J. V. Mendes 
> <pedro.mendes <at> ist.utl.pt <mailto:pedro.mendes <at> ist.utl.pt>> wrote:
>
>     In my system, only with―from man emacs―“
>                 -Q, --quick
>                           Similar  to  "-q --no-site-file
>     --no-splash".  Also, avoid processing X re‐
>                           sources.
>     ” is the prompt transferred to the minibuffer.
>
>     I'll check and tweak the startup configuration.
>
>     Thanks!
>
>     On 25/12/20 21:29, João Távora wrote:
>>     When I studied at that university, shared machines were a thing.
>>     I didn't know if they are still, but I'd also try with:
>>
>>     emacs -q # that's lowercase q
>>
>>     If the problem still happens, it's likely in the site-start.el ,
>>     and not in .emacs
>>
>>     https://www.gnu.org/software/emacs/manual/html_node/emacs/Init-File.html#Init-File
>>
>>     João
>>
>>     On Fri, Dec 25, 2020, 20:46 Daniel Martín via Bug reports for GNU
>>     Emacs, the Swiss army knife of text editors
>>     <bug-gnu-emacs <at> gnu.org <mailto:bug-gnu-emacs <at> gnu.org>> wrote:
>>
>>         "Pedro J. V. Mendes" via "Bug reports for GNU Emacs, the
>>         Swiss army
>>         knife of text editors" <bug-gnu-emacs <at> gnu.org
>>         <mailto:bug-gnu-emacs <at> gnu.org>> writes:
>>
>>         > OK, (only) after starting with emacs -Q does the password
>>         prompt (and
>>         > the focus) appear at the mini-buffer.
>>         >
>>
>>         Yes, that is expected.  The minibuffer prompt should hide
>>         your password
>>         with asterisks as you type it.
>>
>>         I think this may not be a bug in Emacs, but a problem
>>         somewhere in your
>>         Emacs configuration.  Comment out parts of your .emacs until
>>         you find
>>         the culprit.
>>
>>
>>

[Message part 2 (text/html, inline)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.