On Nov 28, 2007 5:23 PM, Charles E Campbell Jr wrote:
>⋅
> Hello!
>⋅
> I don't see any way to encrypt/decrypt strings in the vim function
> library, but there is a way to encrypt a file buffer.  Netrw tries to
> make use of ftp, etc and its associated passwords simpler by retaining
> the password in a variable (which is not normally saved).  Thus one
> reads a file via ftp, say, provides the password to do so, and writing
> is done without requiring another entry of the password.  I thought
> about making a temporary "password" automatically using localtime() at
> first invocation of netrw and the process's pid.  Any good way to get
> the vim process's pid?  How about under Windows?

Unless I'm misreading your intent, you seem to be saying that you want
to replace the current method (storing a password in plaintext) with a
new method (storing a password encrypted and an encryption key in
plaintext).  What security advantage does this provide?  It seems to
just be security through obscurity, since the cracker will only need to
get two values from vim's memory instead of one.  Am I missing
something?

~Matt

--~--~---------~--~----~------------~-------~--~----~
You received this message from the "vim_dev" maillist.
For more information, visit http://www.vim.org/maillist.php
-~----------~----~----~----~------~----~------~--~---

Raspunde prin e-mail lui