Re:TOTP tokens on my wrist with the smartest dumb watch
by neilv on Tuesday October 18, 2022 @11:20AM
(#33248645)
> reading secrets from command line arguments exposes the secrets in shell history
Yes, and process arguments (such as from command line) can also be accessible in process list data that's accessible to other processes and users.
Even if the process only lives for an instant, or normally no other processes could access the data, good practice is to nevertheless keep secrets out of any process arguments.
Yes, and process arguments (such as from command line) can also be accessible in process list data that's accessible to other processes and users.
Even if the process only lives for an instant, or normally no other processes could access the data, good practice is to nevertheless keep secrets out of any process arguments.