emacs-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: many packages write to `temporary-file-directory' insecurely


From: Pavel Janík
Subject: Re: many packages write to `temporary-file-directory' insecurely
Date: Tue, 19 Mar 2002 07:22:57 +0100
User-agent: Gnus/5.090006 (Oort Gnus v0.06) Emacs/21.2.50 (i386-suse-linux-gnu)

   From: Steve Kemp <address@hidden>
   Date: Mon, 18 Mar 2002 23:49:01 +0000

   >   But it would appear to have the major flaw that a malicious user
   >  could fake their scores with almost no effort, eg:
   > 
   > [matrix] skx > update-score --file=/var/games/emacs/snake-score 
--add-score "Steve 99999999999999 points"

I do not think we should/could prevent this. Note, that this is possible
right now too...
-- 
Pavel Janík

Have you considered defenestrating your computer and replacing Windows with
GNU/Linux?  It is a shame for you to be in bondage to Microsoft.
                  -- Richard Stallman in emacs-devel



reply via email to

[Prev in Thread] Current Thread [Next in Thread]