Re: [Gnumed-devel] Re: bootstrap*

[Karsten Hilbert]

> > would it be acceptable to pass in passwords via the
> > command line ?
> In principle yes (provided that they are hidden as usual for
> passwords).
I have to admit I don't know how to hide the passwords in the
command line. I assume you are worried about someone sniffing
the process environment ?

I think on today's hardware it is impossible to reach both
goals at once: not storing passwords somehow somewhere AND no
user interaction at all. Give me a scenario and I'll give you
an attack mode. Or buy you a beer (which would still only mean
*I* can't figure out an attack).

Karsten
-- 
GPG key ID E4071346 @ wwwkeys.pgp.net
E167 67FD A291 2BEA 73BD  4537 78B9 A9F9 E407 1346