Re: [dev] [ii] exposed password on process monitoring

From: Connor Lane Smith <cls_AT_lubutu.com>
Date: Fri, 20 Apr 2012 00:24:02 +0100

On 19 April 2012 23:51, Connor Lane Smith <cls_AT_lubutu.com> wrote:
> In my opinion the -h flag
> should be made mandatory, with no default host.

Sorry, it's -h in sic, -s in ii (which is confusing, too.)

On 20 April 2012 00:19, Nico Golde <nico_AT_ngolde.de> wrote:
> I don't really like putting that in a file.

Well, in bash you could just 'ii -k <<< pass'.

> I'm more in favor of something simpler as the following currently:

> If if you don't want to leak your password use the environment variable and not -k then...

Why didn't I think of that? I'd rather something like $IIPASS (which
better describes its function), but other than that I totally support
this approach.

Thanks,
cls
Received on Fri Apr 20 2012 - 01:24:02 CEST