153 reputation
3
bio website
location
age
visits member for 1 year, 4 months
seen Apr 5 at 20:18

Mar
4
comment How can I protect myself from this kind of clipboard abuse?
That safe-paste zsh plugin is safe with recent versions of xterm (since 292) in its default configuration since xterm now discards most control characters (including ESC). Note that it only works for the zsh prompt, not for other applications (though some applications like vim could also be extended to do something similar)
Mar
4
comment How can I protect myself from this kind of clipboard abuse?
With "+p, that assumes a version of vim built with X support, and that vim has access to the X display that holds the relevant X selection (for instance, it wouldn't work after a ssh (without -X/-Y)).
Mar
4
comment How can I protect myself from this kind of clipboard abuse?
It seems it's vim, not xterm that turns C0 9B to 1B.
Mar
2
comment How can I protect myself from this kind of clipboard abuse?
Note that xterm already removes all ASCII ctrl (0x0 to 0x31) except \b (unfortunately), \r, \n and \t (unless you tell it not to with the allowPasteControls resource).
Jan
31
comment Why do we ask for a user's existing password when changing their password?
Why do you say it's different from Unix? That's exactly what Gnome (and probably KDE and OS/X as well) do with their key rings and/or encrypted directories (as PAM modules).
Nov
21
comment What's the secure way to change UNIX permissions on a harcoded file often?
See the O_NOFOLLOW flag to open(2) as well (on FreeBSD and Linux at least) to fail if the file is the symlink and avoid having to check for race conditions.