[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Bug-wget] FAQ on hiding passwords from ps -f
From: |
Nathan Phillip Brink |
Subject: |
Re: [Bug-wget] FAQ on hiding passwords from ps -f |
Date: |
Tue, 12 Mar 2013 18:52:15 +0000 |
User-agent: |
Mutt/1.5.20 (2009-06-14) |
On Tue, Mar 12, 2013 at 09:02:05AM +0100, Tim Ruehsen wrote:
> Am Monday 11 March 2013 schrieb Nathan Phillip Brink:
> > To remedy this, naturally, the “echo pass” would be replaced with
> > “echo $pass” or “echo ${pass}”.
>
> Yes, that should be changed.
But, as I stated, changing that does not fix the contents of ${pass}
from showing up in ps -f ;-).
> > I think that the command should be revised to use --post-file. I think
> > that the “read -s -p pass; echo "os_password=${pass}" > sometempfile”
> > method will work OK *as long as echo is a shell built-in*.
>
> What about --ask-password ?
> It will prompt the PW for every connection (from the man page). So it is a
> bit
> different than --password.
--password and --ask-password are for HTTP authentication, not for
filling out query strings/POST data which are normally created by
<form/>s. So, --ask-password solves a different problem, though it
also should probably be mentioned in the wiki.
--
binki
Look out for missing or extraneous apostrophes!
pgpZezY8V2ESn.pgp
Description: PGP signature