News for hackers. Stuff that matters.
Re:Vault – A tool for managing secrets by metric10 on Tuesday April 28, 2015 @04:04PM (#9454783)
Depends on the situation. A Linux machine running as a server can still be accessed by multiple people. Also, a "user" could be a compromised process that can execute commands. Using stdin or a properly created file means one less possible attack vector.
Re:Vault – A tool for managing secrets by skywhopper on Tuesday April 28, 2015 @07:00PM (#9455623)
Doesn't storing the secret in a file first violate half the point of this service? Once it's written to disk in plaintext it's just as recoverable as your shell history.