Re: [dev] announcing edit-pipe

From: Kamil Cholewiński <harry666t_AT_gmail.com>
Date: Sun, 27 Aug 2017 22:46:36 +0200

On Sun, 27 Aug 2017, Thomas Levine <__AT_thomaslevine.com> wrote:
> * mktemp is not portable; you could use something like the date and
> process identifier ($$) to create a portable temporary file.

This is very wrong advice, please don't do this. Current timestamp is as
guessable as it gets. PIDs on most systems are limited to 5 digits. All
very easy to bruteforce.

If you're concerned with the availability of mktemp, port it.

<3,K.
Received on Sun Aug 27 2017 - 22:46:36 CEST