5 ms·

mysql at least replaces -ppassword for -px

• tluyben2 11y ago
  Even though some software does replace the password, it would be better not to use passwords like that at all anyway. Just to be sure.
  • CatCookie 11y ago
    Good point. I think we should be caeful what we do, while administrating the server. Maybe we could build some automatism which stops the screenshot service while an ssh session is established.
    • scott_karana 11y ago
      Either that, or you just exclude all processes forked by bash/ssh :-)
  • mahouse 11y ago
    Once again with mysql you can: MYSQL_PWD=password mysql -uuser db
    • cxseven 11y ago
      On some old systems, I remember that env vars of other UIDs could be seen, even if you weren't root. I wonder if that's still true for any systems out there.
• 0x0 11y ago
  There is a time interval larger than 0.000000000 seconds between the start of a mysql process and the process overwriting its argv :)