[Opensim-dev] ConsoleClient -pass option

[Dave Coyle]

On Thursday 03 September 2009 03:00:46 pm  wrote:
> commit 6b70b5709913e9734f5864560e997b34dfd58b85
> Author: Justin Clark-Casey (justincc) <jjustincc at googlemail.com>
> Date:   Thu Sep 3 20:00:18 2009 +0100
>
>     * Add extra warning about using -pass in
> OpenSim.ConsoleClient.ini.example
>
> <...>
>
> +    ; Please be aware that this is not secure since the password is in the
> clear +    ; we recommend the use of -pass wherever possible
>      ;pass = secret


Is the password not also in the clear, visible to any local user who does a 
'ps', if you use the -pass switch?  Access to OpenSim.ConsoleClient.ini can at 
least be restricted to specific user(s).  I don't see how -pass is the lesser 
of the two evils.

-coyled
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part.
URL: <http://opensimulator.org/pipermail/opensim-dev/attachments/20090903/dfbc54f6/attachment-0001.pgp>