News for hackers. Stuff that matters.

A comment on Summon – Get Your Secrets into Source Control. Parent comment

Re:Summon – Get Your Secrets into Source Control by msm23 on Friday December 04, 2015 @04:28PM (#10679272)
Running

  ps auxwwe
on Linux, Mac OS X, and other Unix-en will show all processes for all users with their complete environment.

Environment variables should not be used to share secrets.

[ Parent | on HN ]
Re:Summon – Get Your Secrets into Source Control by billhathaway on Friday December 04, 2015 @05:20PM (#10679595)
Testing on Linux, if ran as root it does, but if you are running ps auxwwe as normal user, it is only showing env variables for that user.
[ Parent | on HN ]
Re:Summon – Get Your Secrets into Source Control by jlgaddis on Friday December 04, 2015 @07:18PM (#10680142)
On FreeBSD, at least, the ability to see processes belonging to other {g,u}id's can be turned off via a sysctl.
[ Parent | on HN ]