Re: [dev] [ii] exposed password on process monitoring

2012-06-16 Thread pancake
Prefix the 'echo' with a whitespace unless you want your password in the shell history. Else use dev/stdin al password file and press ^D to end the password. If you dump the process memory the password will still be there. So if the environ is a problem, the process memory it is too. So bear i

Re: [dev] [ii] exposed password on process monitoring

2012-06-16 Thread markus schnalke
[2012-06-16 16:33] Connor Lane Smith > > More déjà vu. I apologize for having posted without having read the thread. meillo

Re: [dev] [ii] exposed password on process monitoring

2012-06-16 Thread Connor Lane Smith
On 16 June 2012 16:27, markus schnalke wrote: > AFAIR the environment can be displayed, too. I think it was `ps e'. > Hence the fix is no fix. On 21 April 2012 01:25, Kurt H Maier wrote: > I am mildly convinced that other users cannot see env data with ps -e. > I am also vaguely determined that

Re: [dev] [ii] exposed password on process monitoring

2012-06-16 Thread Kurt H Maier
On Sat, Jun 16, 2012 at 05:27:00PM +0200, markus schnalke wrote: > [2012-06-16 17:00] Nico Golde > > > > Thanks for reminding me. ii tip contains a change now so that -k specifies > > an environment variable containing the password and not the password > > directly. > > AFAIR the environment can

Re: [dev] [ii] exposed password on process monitoring

2012-06-16 Thread markus schnalke
[2012-06-16 17:00] Nico Golde > > Thanks for reminding me. ii tip contains a change now so that -k specifies > an environment variable containing the password and not the password > directly. AFAIR the environment can be displayed, too. I think it was `ps e'. Hence the fix is no fix. meillo

Re: [dev] [ii] exposed password on process monitoring

2012-06-16 Thread Nico Golde
Hi, * Ivan Kanakarakis [2012-06-13 14:49]: > On 20 April 2012 03:37, Nico Golde wrote: [...] > > > I think a nice thing to do that would also resolve the > > > naming choice would be to have -k or some other argument > > > mean that ii should read the -k flag as an env var. so > > > $ ii -k IR

Re: [dev] [ii] exposed password on process monitoring

2012-06-16 Thread Calvin Morrison
Ah how silly of me On Jun 16, 2012 8:06 AM, "Andrew Hills" wrote: > On Fri, Jun 15, 2012 at 7:14 PM, Calvin Morrison > wrote: > > On Jun 15, 2012 6:13 PM, "Kurt H Maier" wrote: > >> On Fri, Jun 15, 2012 at 05:28:14PM -0400, Calvin Morrison wrote: > >> > Why not just pass the argument from a fil

Re: [dev] [ii] exposed password on process monitoring

2012-06-16 Thread Andrew Hills
On Fri, Jun 15, 2012 at 7:14 PM, Calvin Morrison wrote: > On Jun 15, 2012 6:13 PM, "Kurt H Maier" wrote: >> On Fri, Jun 15, 2012 at 05:28:14PM -0400, Calvin Morrison wrote: >> > Why not just pass the argument from a file? >> > >> > Exec --flag `cat password-file` >> hahahah > What is so funny? T

Re: [dev] [ii] exposed password on process monitoring

2012-06-16 Thread hiro
hahahahahahahaha

Re: [dev] [surf] crash when leaving a page containing java

2012-06-16 Thread stanio
* pancake [2012-06-15 18:07]: > it is possible to disable all plugins (flash/java..) in surf? That't how I browse around most of the time. I posted a toggle patch a week or two ago; search for message id 20120602113939.GA26438 or look here http://lists.suckless.org/dev/1206/11716.html the relev