DPythOS 0.0 released

Oleg Broytmann phd at phd.pp.ru
Tue May 14 15:28:22 EDT 2002


On Tue, May 14, 2002 at 03:26:37PM +0000, Luke Kenneth Casson Leighton wrote:
> > > > -	all versions of ssh are non-interactive with respect to
> > > > 	password input.  i had to patch open-ssh to accept
> > > > 	passwords on the command-line (ssh password:user at host).
> > > 
> > >    That's bad, pretty bad. Now anyone with access to /bin/ps can view
> > > all passwords :(
>  
>  the other is to overwrite the args so they can't show up.

   Race condition (there is a time frame where the password will be exposed
anyway).

Oleg.
-- 
     Oleg Broytmann            http://phd.pp.ru/            phd at phd.pp.ru
           Programmers don't die, they just GOSUB without RETURN.





More information about the Python-list mailing list