[HN Gopher] Find Sensitive Information
___________________________________________________________________
Find Sensitive Information
Author : eladkaplan
Score : 5 points
Date : 2022-08-24 21:41 UTC (1 hours ago)
(HTM) web link (github.com)
(TXT) w3m dump (github.com)
| eladkaplan wrote:
| shellclear is a security tool that provides a simple and fast way
| to secure your shell command history. Sensitive data can be
| stored in your history file when exporting a token of something
| or running a script with a token. Sometimes those secrets can be
| visible to others when sharing your terminal / autocomplete
| command and more.
|
| * Shellclaer can be a shell plugin that shows a summary of
| sensitive data when opening a new terminal * Get a list of
| sensitive data found in the history shells * Clear the sensitive
| information
| denysvitali wrote:
| What's wrong with:
|
| read -s -r MY_PASSWORD
|
| export MY_PASSWORD
|
| curl -u "admin:$MY_PASSWORD" https://example.com
|
| ?
| electric_mayhem wrote:
| Env variables are exposed via the /proc filesystem.
|
| I'd just unset histsize and histfile cars for the duration of
| doing sensitive stuff.
___________________________________________________________________
(page generated 2022-08-24 23:01 UTC)