A post by Eshel Yaron with details and advice about a long standing arbitrary code execution vulnerability in Emacs
  • Atemu
    9•7 days ago

    IDEs and such prompt the user whether they trust any new repositories they open. If Emacs had similar functionality, elisp eval could simply be disabled by default and users would then M-x trust-this-repository to permanently enable it again for the repo they’re in.

    • @[email protected]English
      2•6 days ago

      Plus we could also get rid of the hacky risky vs safe dir-locals system that fills up custom.el with clutter

  • @sir_pronounEnglish
    1•7 days ago

    …all y’all know exactly how to avoid an emacs vulnerability, but I’m afraid to VoIce My opinion