[chuck-users] VT100 emulation

Hans Aberg haberg at math.su.se
Sun May 3 09:00:31 EDT 2009


On 3 May 2009, at 14:36, Kassen wrote:

>> .system' must be enabled (it seems) using startup option
>> '--caution-to-the-wind'.
>
> This is intentional.
>
> A ChucK VM is open to connections over the network, actually; using a
> second (or third...) terminal to send commands to the VM uses a
> connection to localhost to work at all. Hence having Std.system() take
> arbitary commands and execute them with the user's permissions meant a
> rather large security hole.
>
> This way the power to use system commands is there for anyone to use
> but the user him/herself will need to make the choice to trade
> security for power.
>
> As far as I know this is a purely theoretical issue but is is a rather
> large hole.

Those security issues can be tricky. Echo on/off commands plus a way  
to resetting when exiting on a signal would suffice.

> Your code works beautifully on my Linux install, ...

Fine, though somewhat expected, since xterm supports these escape codes.

> I'll try Windows
> later today; we might be lucky (I don't have much hope there but
> simply trying seems easier than digging through the Windows
> reference). If it doesn't work maybe it could be ported; the Windows
> shell does have quite a few options that DOS lacked but I don't know
> most of them off-hand.

I wonder what might happen on that platform. If it works, it might be  
nice with a simple library.

   Hans




More information about the chuck-users mailing list