On Tue, Nov 02, 2021 at 12:17:17PM +0100, Vincent Lefevre wrote:
> On 2021-10-29 14:19:29 -0500, Derek Martin wrote:
> > On Wed, Oct 27, 2021 at 05:10:35PM +0200, Vincent Lefevre wrote:
> > > I was wondering whether this could occur when switching to the
> > > alternate screen. But it seems that this is not the case, at least
> > > not with Xterm's logging feature.
> > 
> > Right, that wouldn't make sense... the I/O is not re-delivered to the
> > terminal (and I assume the contents of the alternate screen are just
> > sitting in a buffer, which is simply re-displayed).  Otherwise
> > switching back and forth between screens would cause the data to be
> > sent to the printer, again and again...  That does not seem like it
> > would ever be desireable behavior.
> 
> Well, for lots of bugs, the behavior doesn't make sense. That's why
> they are bugs. Thus it may be a good idea not to leave private data
> behind, in case there would be such a bug.
> 
> Similarly, there is (was?) this old Xorg/nouveau bug that may reveal
> parts of the user's desktop after reboot (which is problematic on a
> shared computer). Displaying old video memory (not erased at logout
> or at shutdown) doesn't make sense, but this happened.

Yeah but those are actual bugs, where leaving data behind on the
user's terminal's alternate screen IS NOT.  It's designed to work that
way, and the design is correct... it's largely the reason alternate
screens exist.  Re-dumping the data to your printer would be a bug in
your terminal.

If your terminal has a bug where that's a problem, any related
security issue is in the terminal, NOT in Mutt.  I think you can make
a pretty good case that Mutt should work around stupidity in broken
e-mail clients (like all the various brain damage in Outlook), since
it is directly related to, and directly affects, Mutt's primary
function.  But I don't think you can make a good case that Mutt should
try to work around every possible bug in every possible software
component of your system, since that is a practical impossibility.

-- 
Derek D. Martin    http://www.pizzashack.org/   GPG Key ID: 0xDFBEAD02
-=-=-=-=-
This message is posted from an invalid address.  Replying to it will result in
undeliverable mail due to spam prevention.  Sorry for the inconvenience.

Attachment: signature.asc
Description: PGP signature

Reply via email to