On Tue, Nov 02, 2021 at 12:17:17PM +0100, Vincent Lefevre wrote: > On 2021-10-29 14:19:29 -0500, Derek Martin wrote: > > On Wed, Oct 27, 2021 at 05:10:35PM +0200, Vincent Lefevre wrote: > > > I was wondering whether this could occur when switching to the > > > alternate screen. But it seems that this is not the case, at least > > > not with Xterm's logging feature. > > > > Right, that wouldn't make sense... the I/O is not re-delivered to the > > terminal (and I assume the contents of the alternate screen are just > > sitting in a buffer, which is simply re-displayed). Otherwise > > switching back and forth between screens would cause the data to be > > sent to the printer, again and again... That does not seem like it > > would ever be desireable behavior. > > Well, for lots of bugs, the behavior doesn't make sense. That's why > they are bugs. Thus it may be a good idea not to leave private data > behind, in case there would be such a bug. > > Similarly, there is (was?) this old Xorg/nouveau bug that may reveal > parts of the user's desktop after reboot (which is problematic on a > shared computer). Displaying old video memory (not erased at logout > or at shutdown) doesn't make sense, but this happened.
Yeah but those are actual bugs, where leaving data behind on the user's terminal's alternate screen IS NOT. It's designed to work that way, and the design is correct... it's largely the reason alternate screens exist. Re-dumping the data to your printer would be a bug in your terminal. If your terminal has a bug where that's a problem, any related security issue is in the terminal, NOT in Mutt. I think you can make a pretty good case that Mutt should work around stupidity in broken e-mail clients (like all the various brain damage in Outlook), since it is directly related to, and directly affects, Mutt's primary function. But I don't think you can make a good case that Mutt should try to work around every possible bug in every possible software component of your system, since that is a practical impossibility. -- Derek D. Martin http://www.pizzashack.org/ GPG Key ID: 0xDFBEAD02 -=-=-=-=- This message is posted from an invalid address. Replying to it will result in undeliverable mail due to spam prevention. Sorry for the inconvenience.
signature.asc
Description: PGP signature