emacs-orgmode@gnu.org archives
 help / color / mirror / code / Atom feed
From: Gustavo Barros <gusbrs.2016@gmail.com>
To: Ihor Radchenko <yantar92@posteo.net>
Cc: Timothy <orgmode@tec.tecosaur.net>,
	org-mode list <emacs-orgmode@gnu.org>
Subject: Re: How to disable org-persist in a given file?
Date: Tue, 2 May 2023 18:25:48 -0300	[thread overview]
Message-ID: <CAM9ALR-HG56cNQPCvA-iM9buB6c2V2Xh2V1VJx+W1hR20AYFkA@mail.gmail.com> (raw)
In-Reply-To: <87zg6mqwn8.fsf@localhost>

On Tue, 2 May 2023 at 17:54, Ihor Radchenko <yantar92@posteo.net> wrote:

> I think `recentf-save-file' for example is no different. And
> org-id-locations-file. And custom-file, if you happen to save safe
> buffer-local variables by answering "!" in Emacs prompt. And many many
> other places.

Those two are easy to avoid, if one wishes. But granted, there are
plenty of places, some keeping file names, some worse. Still, this is
arguably something to avoid.

> I do not think that file name, even from encrypted volume, is something
> we need to worry about.

Granted too. What I'm worried about is being able to disable the
feature. Besides, why store it in the index if the persist file does
not exist?

> I even suspect that, for example, browser cache often contains all kinds
> of secrets, like files associated with web pages were you logged in. And
> they can be read by anyone familiar with the layout! (like
> https://www.nirsoft.net/utils/chrome_cache_view.html)

I really hope that's not Org's benchmark.  ;-)

> That said, do not worry about this issue being forgotten. But it is not
> easy to design cleanly. I am thinking about it.
> Of course, if you have good ideas or patches, they are welcome.

Thank you!

Best,
Gustavo.


  reply	other threads:[~2023-05-02 21:26 UTC|newest]

Thread overview: 14+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2023-04-22 19:32 How to disable org-persist in a given file? Gustavo Barros
2023-04-23 10:58 ` Ihor Radchenko
2023-04-23 13:15   ` Gustavo Barros
2023-04-23 13:35     ` Ruijie Yu via General discussions about Org-mode.
2023-04-23 14:27       ` Gustavo Barros
2023-04-23 13:54     ` Ihor Radchenko
2023-04-23 14:13       ` Gustavo Barros
2023-04-25 10:24         ` Ihor Radchenko
2023-04-25 10:52           ` Gustavo Barros
2023-05-02 20:36             ` Gustavo Barros
2023-05-02 20:57               ` Ihor Radchenko
2023-05-02 21:25                 ` Gustavo Barros [this message]
2023-05-03 10:58               ` Ihor Radchenko
2023-05-03 11:03                 ` Gustavo Barros

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

  List information: https://www.orgmode.org/

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=CAM9ALR-HG56cNQPCvA-iM9buB6c2V2Xh2V1VJx+W1hR20AYFkA@mail.gmail.com \
    --to=gusbrs.2016@gmail.com \
    --cc=emacs-orgmode@gnu.org \
    --cc=orgmode@tec.tecosaur.net \
    --cc=yantar92@posteo.net \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
Code repositories for project(s) associated with this public inbox

	https://git.savannah.gnu.org/cgit/emacs/org-mode.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).