Re: Emacs Arbitrary Code Execution and How to Avoid It

[Jean Louis]

* Richard Stallman <rms@gnu.org> [2024-12-12 07:48]:
> [[[ To any NSA and FBI agents reading my email: please consider    ]]]
> [[[ whether defending the US Constitution against all enemies,     ]]]
> [[[ foreign or domestic, requires you to follow Snowden's example. ]]]
> 
>   > As I understand it, the issue is that the user has already
>   > said "execute elisp code in any elisp-mode files," 
> 
> Does the user literallky say that. or does the user say something
> different which you _interpret_ as _tentamount_ to saying that?
> 
> It makes a big difference here.

I was first under impression that such user would be aware of it, but
after reviewing Flymake, no, user will not be aware of it.

Even though condition would rarely happen, Flymake purpose is to
verify Emacs Lisp programming for correctness, I don't think many
would be verifying other people's files for correctness, normally
one's own files.

Though the problem may exist in other packages as well. It should
simple be disabled.

Jean Louis