[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Feature request: command-line report of account status



On Wed, 9 Oct 2013 20:23:53 +1300, Jason Ryan wrote:
>   wget --no-proxy --post-data="address=$user&password=$pass" [...]

Mind you, that allows *any other* user of your computer to see your
Tarsnap password (including reduced-privilege accounts), and doesn't
allow for passwords containing [&#"].

(Process arguments are always visible; if a reduced-privilege process on
your computer has been compromised, it can still get this information.)

 - Tim McCormack

Attachment: signature.asc
Description: PGP signature