DPythOS 0.0 released
Oleg Broytmann
phd at phd.pp.ru
Tue May 14 15:28:22 EDT 2002
On Tue, May 14, 2002 at 03:26:37PM +0000, Luke Kenneth Casson Leighton wrote:
> > > > - all versions of ssh are non-interactive with respect to
> > > > password input. i had to patch open-ssh to accept
> > > > passwords on the command-line (ssh password:user at host).
> > >
> > > That's bad, pretty bad. Now anyone with access to /bin/ps can view
> > > all passwords :(
>
> the other is to overwrite the args so they can't show up.
Race condition (there is a time frame where the password will be exposed
anyway).
Oleg.
--
Oleg Broytmann http://phd.pp.ru/ phd at phd.pp.ru
Programmers don't die, they just GOSUB without RETURN.
More information about the Python-list
mailing list