Environment Variables Considered Harmful for Your Secrets

Re:Environment Variables Considered Harmful for Your Secrets by geocar on Friday January 02, 2015 @05:44AM (#8826341)

Delete sensitive environment variables after you read them, or don't run programs you don't trust with an unsanitary environment/argument list (e.g. execve not system)

[ Parent | on HN ]

Re:Environment Variables Considered Harmful for Your Secrets by mreinsch on Friday January 02, 2015 @05:54AM (#8826360)

Thanks for that idea of deleting sensitive environment variables. I like that for hosters such as heroku which use ENV variables for config (including secrets) by default.

[ Parent | on HN ]