On 8 February 2018 at 03:26, Esteban A. Maringolo <emaring...@gmail.com>
wrote:

> Thank you. It looks really nice. I enjoy every time I see Pharo integrated
> with a "regular" tool for Devops.
>
> The only thing that concerns me is whether we should have a credentials
> manager of some sort, I cannot stop worrying about saving the username and
> password in plaintext, not only for Sentry.
>

Because of the way an Image persists data, leaking passwords and api keys
when sharing an Image (e.g. for troubleshooting) is a concern.
For my use case, since this api key is only sent to an ffi callout, my
solution was to read the password from file into volatile memory so
it disappears when the VM exits.  See this line....
    externalVolatileSecret := ExternalAddress gcallocate: externalSize .
here...

https://github.com/Traadh/bittrex/blob/master/src/Bittrex.package/BittrexAPI.class/class/configureApiKey.secretFromFile..st
(of course, not my real api key)

Such a custom solution is easy, but I've thought that something similar out
of the box
with a GUI tool to manage it would be valuable to many.

cheers -ben


>
> Esteban A. Maringolo
>
> 2018-02-07 16:20 GMT-03:00 Stephane Ducasse <stepharo.s...@gmail.com>:
>
>> Nice :)
>>
>> Do you send the stack?
>>
>> Stef
>>
>> On Tue, Feb 6, 2018 at 10:55 PM, Peter Uhnák <i.uh...@gmail.com> wrote:
>>
>>> I guess the subject should say [ANN] too... :)
>>>
>>>
>>> On Tue, Feb 6, 2018 at 10:55 PM, Peter Uhnák <i.uh...@gmail.com> wrote:
>>>
>>>> Hi,
>>>>
>>>> I've made an experimental SDK for sentry.io to track errors in
>>>> end-user installations.
>>>>
>>>> Also usable as a Logger for Beacon (which I guess should be the primary
>>>> way to use this).
>>>>
>>>> ... and  as an extension for Debugger (basically a replacement for
>>>> ShoreLine, which is too simplistic for my needs).
>>>>
>>>> https://github.com/peteruhnak/pharo-sentry
>>>>
>>>> [image: Inline image 1]
>>>>
>>>> Peter
>>>>
>>>
>>>
>>
>

Reply via email to