Putting trojan horse fixes where they belong

Guy Harris guy at auspex.UUCP
Sat Dec 17 09:02:29 AEST 1988


>There are many sites that CANNOT put ANYTHING into $HOME/.exrc to turn
>  this trojan-horse mechanism off.

Those sites don't support "+set nomodelines" on the command line,
either, so the "fix" to Pnews doesn't help.

>There are probably some people who use 'set modeline[s]' in their .exrc because
>  they actually USE this feature, and requiring them to change this, instead
>  of fixing dangerously naive software, is shortsighted.

Err, umm, requiring them to change this prevents them from getting
screwed when running *other* utilities; care to track down *every single
utility* that runs "vi" - including the Bourne, C, and Korn shells - and
fix them?

Furthermore, if Arthur Olson's analysis is correct, the "+set modeline"
gets interpreted after the file's been read and checked for mode lines,
so it doesn't help anyway....



More information about the Comp.unix.wizards mailing list