Re:Vault – A tool for managing secrets
by metric10 on Tuesday April 28, 2015 @04:04PM
(#9454783)
Depends on the situation. A Linux machine running as a server can still be accessed by multiple people. Also, a "user" could be a compromised process that can execute commands. Using stdin or a properly created file means one less possible attack vector.
[ Parent
| on HN ]
Re:Vault – A tool for managing secrets
by skywhopper on Tuesday April 28, 2015 @07:00PM
(#9455623)
Doesn't storing the secret in a file first violate half the point of this service? Once it's written to disk in plaintext it's just as recoverable as your shell history.