Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dangerous behavior to keep user and password in a command instead of a protected secret file #8

Open
sub3stinger opened this issue Jul 13, 2020 · 0 comments

Comments

@sub3stinger
Copy link

Since
AUTH="--user=${USERNAME} --password=${PASSWORD}"
will expose the user and password information in the system by ps and in the command history, strongly suggested to rewrite related code by using wgetrc or other ways for downloading the files in the data hubs.
Especially for those large files, the user and password is visible through easy ps ax | grep wget which is very dangerous.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant