Skip to content

Suggest substituting $password rather than obscuring #6

@jangari

Description

@jangari

kpcli/kpcli.pl

Line 1852 in cbcd27c

$password = colored(['red on_red'], $password);

I see the point of obscuring the password with red on red, but this could be a security flaw if a user ran show and then quit, as the password would still be in their terminal buffer and could be copied. I've modified my copy so that each character is replaced by an asterisk when running show. Running show -f still shows plan text passwords.

PS, great program. I have basically replaced KeePassX with this.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions