[Gnumed-devel] Re: bootstrap*

[Andreas Tille]

On Thu, 30 Jan 2003, Karsten Hilbert wrote:

> I have to admit I don't know how to hide the passwords in the
> command line. I assume you are worried about someone sniffing
> the process environment ?
No.  I'm worried about someone standing behind me ...
I'm curious whether there is any password entry class in Python ...

> I think on today's hardware it is impossible to reach both
> goals at once: not storing passwords somehow somewhere AND no
> user interaction at all. Give me a scenario and I'll give you
> an attack mode. Or buy you a beer (which would still only mean
> *I* can't figure out an attack).
It is a non-technical attack if someone stands behind you and
is watching your screen.

Kind regards

        Andreas.