News for hackers. Stuff that matters.

A comment on Environment Variables Considered Harmful for Your Secrets. Parent comment

Re:Environment Variables Considered Harmful for Your Secrets by alexatkeplar on Saturday January 03, 2015 @06:33AM (#8830519)
Wow, this is the only thing I've seen in this thread which doesn't just add another layer of turtles to the problem. With your suggestion, even if an attacker could gain access to the box, they wouldn't be able to get at the secrets. Is there any prior art/blog posts/software for this approach you could point me at?
[ Parent | on HN ]
Re:Environment Variables Considered Harmful for Your Secrets by Someone on Saturday January 03, 2015 @10:48AM (#8830981)
For the Mac OS X technology, https://developer.apple.com/library/mac/documentation/Securi... is a good starting point.

I don't know of full open source equivalents. Parts of Apple's code are open source, though, for example http://opensource.apple.com/source/security_systemkeychain/s... (may not even compile; not all Apple's open source releases do)

[ Parent | on HN ]