[chuck-users] VT100 emulation
Hans Aberg
haberg at math.su.se
Sun May 3 09:00:31 EDT 2009
On 3 May 2009, at 14:36, Kassen wrote:
>> .system' must be enabled (it seems) using startup option
>> '--caution-to-the-wind'.
>
> This is intentional.
>
> A ChucK VM is open to connections over the network, actually; using a
> second (or third...) terminal to send commands to the VM uses a
> connection to localhost to work at all. Hence having Std.system() take
> arbitary commands and execute them with the user's permissions meant a
> rather large security hole.
>
> This way the power to use system commands is there for anyone to use
> but the user him/herself will need to make the choice to trade
> security for power.
>
> As far as I know this is a purely theoretical issue but is is a rather
> large hole.
Those security issues can be tricky. Echo on/off commands plus a way
to resetting when exiting on a signal would suffice.
> Your code works beautifully on my Linux install, ...
Fine, though somewhat expected, since xterm supports these escape codes.
> I'll try Windows
> later today; we might be lucky (I don't have much hope there but
> simply trying seems easier than digging through the Windows
> reference). If it doesn't work maybe it could be ported; the Windows
> shell does have quite a few options that DOS lacked but I don't know
> most of them off-hand.
I wonder what might happen on that platform. If it works, it might be
nice with a simple library.
Hans
More information about the chuck-users
mailing list