caseykneale / VIMKiller

Exiting VIM is hard; sometimes we need to take drastic measures
MIT License
1.22k stars 15 forks source link

Security issue #18

Open Kyuuhachi opened 3 years ago

Kyuuhachi commented 3 years ago

Currently, the Julia script doesn't perform any authentication at all. There's no protection from faux VIMKiller devices, which means any malignant actor who has at any time had physical access to your computer could remotely kill Vim at any time. While this service would of course be greatly appreciated, it still makes me feel a bit nervous.

Even worse, they could create a MitM device that silently rewrites any KillVIM! commands to DontKillVIM!, which would have disastrous consequences.