News for hackers. Stuff that matters.

A comment on Atuin replaces your existing shell history with a SQLite database. Parent comment

Re:Atuin replaces your existing shell history with a SQLite ... by SoftTalker on Saturday May 06, 2023 @06:18PM (#35845836)
People's history files are a great place to look for passwords and other secrets, mainly. I suppose that risk could be reduced by having the history file encrypted on disk, but I don't know of any shell that does that (can't honestly say I've really looked though).
[ Parent | on HN ]
Re:Atuin replaces your existing shell history with a SQLite ... by philsnow on Saturday May 06, 2023 @09:40PM (#35847057)
I get a ton of value out of having my shell history available (both for search but also to try to reconstruct steps of what I did yesterday when my memory is hazy)

I guess you could set up an entropy scanner and flag history lines that have high entropy, but that might not be enough (low-entropy secrets) and might be bothersome (lots of false positives / things that are technically secrets but that you don't care if they're in your shell history).

[ Parent | on HN ]