Re: Can shell-escape take advantage of needauth framework?

[Tommaso Cucinotta]

On 19/07/2017 11:06, Pavel Sanda wrote:

I disagree though that we should ban needauth mechanism right now and
if the argument really is that I can trick someone into unchecking
whatever I want, then I can directly trick him into writing rm -rf /
on the commandline.

+1, albeit quite evidently implicit from my side :-)!

        T.