Questions tagged [security]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
1answer
64 views

How to use an Easy PG encrypted custom-file?

So, inspired by this article. I decided to try adding the following to my init.el: (setq custom-file (expand-file-name "secret.el" user-emacs-directory)) (load custom-file) Where the file in ...
2
votes
1answer
99 views

How can I create secrets for use with the Secrets API auth-source?

Trying to create new secrets in the GNOME keyring via auth-source results in The Secrets API auth-source backend doesn’t support creation yet How can I manually create this secret?
3
votes
1answer
76 views

Secure random numbers

I'd like to generate some random passwords using Emacs, and thus need a secure random number generator. I don't like that 'random might be seeded from system time I'd feel most comfortable just ...
0
votes
0answers
75 views

MELPA's public key

I'd like to install Magit. According to the Installation chapter of the Magit user manual Magit is available from Melpa and Melpa-Stable. If you haven’t used Emacs’ package manager before, then it ...
4
votes
1answer
1k views

Execute org-mode source blocks without security confirmation

I only want to turn off the warnings for certain source block languages. I couldn't find an answer to this anywhere, only how to turn off the confirmation requests for all languages: (setq org-...
13
votes
2answers
2k views

How to automatically sign commits with magit?

I'm interested on having each of my commits signed with my GPG key. Since I use magit for interfacing with git, I was wondering if telling magit to sign each commit was possible (or some workaround to ...
2
votes
2answers
84 views

Will there be security updates to Emacs 24.3?

I am trying to make the case to my employer that updating from Emacs 24.3 to Emacs 24.5 is the right thing to do. The (understandable) justification for sticking with version 24.3 is that it is ...
9
votes
1answer
185 views

How do I verify a large package in a git repo is safe?

I'm looking at emacs helm specifically, which has the following properties: it has thousands of commits it is largely maintained by one user the maintainer has no other profiles (social media, etc.) ...
2
votes
2answers
112 views

crypto-newbie: how to securely sign outgoing email with `smtpmail` (or simplest alternative)?

I'm running $ cat /etc/debian_version jessie/sid $ uname -rv 3.11-2-amd64 #1 SMP Debian 3.11.8-1 (2013-11-13) $ gcc --version | head -n 1 gcc (Debian 4.8.2-1) 4.8.2 $ emacs --version | head -n 1 GNU ...
8
votes
1answer
790 views

How do you select under emacs the key you sign/encrypt with when using mml?

Long time mutt user, I am currently trying to learn how to deal with my mail from within emacs with the help of mu4e. When it comes to signing mail, I use the following (add-hook 'message-send-hook '...
8
votes
1answer
383 views

How to prevent shr from making network connections

Recent versions of Emacs have a really good renderer for HTML written entirely in Elisp. This renderer (shr) can be used for displaying HTML emails, documentation, etc. However, it seems that shr ...
9
votes
2answers
258 views

Configure jabber without writing password in plain text

I find jabber to be a fantastic tool, but it worries me a little that my password is written in plain text in my init file. Is there a way to configure my jabber login credentials without writing them ...
13
votes
2answers
2k views

Safe way to `enable-local-variables`?

I inherited my .emacs file from a friend about 18 years ago. Buried in the middle is the following ominous comment warning about the security implications of the enable-local-variables feature: ;; ...