Re: [Bug-wget] FAQ on hiding passwords from ps -f

[Nathan Phillip Brink]

On Tue, Mar 12, 2013 at 09:02:05AM +0100, Tim Ruehsen wrote:
> Am Monday 11 March 2013 schrieb Nathan Phillip Brink:
> > To remedy this, naturally, the “echo pass” would be replaced with
> > “echo $pass” or “echo ${pass}”.
> 
> Yes, that should be changed.

But, as I stated, changing that does not fix the contents of ${pass}
from showing up in ps -f ;-).

> > I think that the command should be revised to use --post-file. I think
> > that the “read -s -p pass; echo "os_password=${pass}" > sometempfile”
> > method will work OK *as long as echo is a shell built-in*.
> 
> What about --ask-password ?
> It will prompt the PW for every connection (from the man page). So it is a 
> bit 
> different than --password.

--password and --ask-password are for HTTP authentication, not for
filling out query strings/POST data which are normally created by
<form/>s. So, --ask-password solves a different problem, though it
also should probably be mentioned in the wiki.

-- 
binki

Look out for missing or extraneous apostrophes!

pgpZezY8V2ESn.pgp
Description: PGP signature