Hacker News Reader

This problem is specific to elisp evaluation. It is rare that you would want to work in elisp code and not be modifying your currently running emacs.

If you are working on code for any other language, it is probably using an LSP or other form of child processes, right?

View on HN

(Adding as a very late edit on the above. I didn't mean that this problem cannot exist in other settings, which I can see is what folks probably read me as meaning. I just meant the problem in this overall story is specific to elisp because it is core to emacs.)

Well I wouldn't say any other language. Common Lisp for example you have a currently running lisp instance that you are modifying.

You can pretty easily set up Emacs to work that way for any language with a REPL.

Fair, though with the CL/Python/Whatever you would have to have a session started before visiting the file. I suppose with the newer eglot and friends, it could reach out using LSP as soon as you enter a project directory? At that point, I'd assume similar attacks exist in those contexts, too? Maybe protected by some sandboxing in the LSP side?

Reply on news.ycombinator.com