Re: SDI: Secure Semantic Data Injection
Jessica Mulein <[email protected]> Sun, 17 May 2026 16:44:34 -0700
| Newsgroups | gmane.comp.shells.zsh.devel,gmane.comp.shells.zsh.user |
|---|---|
| Message-ID | <CAGHaRPZRY9K1q7UCko01-2+SnwjJBgvUSO_J15aj4FRwv4Qu4A@mail.gmail.com> |
--000000000000e47ffb06520c0714 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable I've got to work on my examples =F0=9F=A4=A6=F0=9F=8F=BC=E2=80=8D=E2=99=80= =EF=B8=8F On Sun, May 17, 2026, 2:55=E2=80=AFPM Dominik Vogt <[email protected]> wr= ote: > On Sun, May 17, 2026 at 08:41:01PM +0000, Jessica Mulein wrote: > > I developed a thing called ?SDI? or "Secure Semantic Data > > Injection? and added it to BSH. > > The example command from the web site > > $ printf '{"username":"alice","password":"s3cr3t","ttl":300}' | ... > > puts a plain text copy of the user's password in the zsh history > file which is possibly world readable. > > Ciao > > Dominik ^_^ ^_^ > > -- > > Dominik Vogt > > --000000000000e47ffb06520c0714 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"auto">I've got to work on my examples =F0=9F=A4=A6=F0=9F=8F= =BC=E2=80=8D=E2=99=80=EF=B8=8F</div><br><div class=3D"gmail_quote gmail_quo= te_container"><div dir=3D"ltr" class=3D"gmail_attr">On Sun, May 17, 2026, 2= :55=E2=80=AFPM Dominik Vogt <<a href=3D"mailto:[email protected]">domi= [email protected]</a>> wrote:<br></div><blockquote class=3D"gmail_quote" s= tyle=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On S= un, May 17, 2026 at 08:41:01PM +0000, Jessica Mulein wrote:<br> > I developed a thing called ?SDI? or "Secure Semantic Data<br> > Injection? and added it to BSH.<br> <br> The example command from the web site<br> <br> =C2=A0 $ printf '{"username":"alice","password= ":"s3cr3t","ttl":300}' | ...<br> <br> puts a plain text copy of the user's password in the zsh history<br> file which is possibly world readable.<br> <br> Ciao<br> <br> Dominik ^_^=C2=A0 ^_^<br> <br> -- <br> <br> Dominik Vogt<br> <br> </blockquote></div> --000000000000e47ffb06520c0714--