3 ms·
I am one of those emacs users who use it for everything, it always worries me the way that it could be attacked given (particularly email some how evaling some
by kodoman 2mo ago
I am one of those emacs users who use it for everything, it always worries me the way that it could be attacked given (particularly email some how evaling some elisp or something), Despite how easy emacs would be to exploit in many aspects I do not know of any attack done on emacs either through supply chain attack (think about how many third party libs an emacs mode might use) or one of the many ways that it's no doubt possible to get emacs to eval something the user would not want it to do. If anyone knows why or if their has been an attack on emacs I would love to know.
- a_e_k 2mo agoSee "The Cuckoo's Egg" [1] by Cliff Stoll (who sometimes posts here [2]). A few related HN threads: [3] [4] [5]. The book describes tracking down a hacker in 1986 who exploited a vulnerability in early Emacs' movemail utility. [1] https://en.wikipedia.org/wiki/The_Cuckoo%27s_Egg_(book) https://en.wikipedia.org/wiki/The_Cuckoo%27s_Egg_(book) [2] https://news.ycombinator.com/user?id=CliffStoll https://news.ycombinator.com/user?id=CliffStoll [3] https://news.ycombinator.com/item?id=21830277 https://news.ycombinator.com/item?id=21830277 [4] https://news.ycombinator.com/item?id=39843930 https://news.ycombinator.com/item?id=39843930 [5] https://news.ycombinator.com/item?id=49406713 https://news.ycombinator.com/item?id=49406713
- kodoman 2mo agoVery nice thank you!