News for hackers. Stuff that matters.
Re:Atuin replaces your existing shell history with a SQLite ... by SoftTalker on Saturday May 06, 2023 @05:05PM (#35845364)
Wow so it looks like I'm in the minority in having shell command history disabled? I have a small number of commands (20) that go into the live history of login shells for convenience, but nothing gets saved when I log out.

If there's something I do repeatedly, I make an alias or a function for it.

Re:Atuin replaces your existing shell history with a SQLite ... by maleldil on Saturday May 06, 2023 @05:59PM (#35845711)
I think you have an unusual take on this. Why do you disable history?
Re:Atuin replaces your existing shell history with a SQLite ... by SoftTalker on Saturday May 06, 2023 @06:18PM (#35845836)
People's history files are a great place to look for passwords and other secrets, mainly. I suppose that risk could be reduced by having the history file encrypted on disk, but I don't know of any shell that does that (can't honestly say I've really looked though).
Re:Atuin replaces your existing shell history with a SQLite ... by philsnow on Saturday May 06, 2023 @09:40PM (#35847057)
I get a ton of value out of having my shell history available (both for search but also to try to reconstruct steps of what I did yesterday when my memory is hazy)

I guess you could set up an entropy scanner and flag history lines that have high entropy, but that might not be enough (low-entropy secrets) and might be bothersome (lots of false positives / things that are technically secrets but that you don't care if they're in your shell history).