4 ms·
I think it's just an example to give you a conceptual idea of what 'pass' is doing under the covers. Of course, using 'pass' does not require 'echo'ing your pas
by burntsushi 5y ago
I think it's just an example to give you a conceptual idea of what 'pass' is doing under the covers. Of course, using 'pass' does not require 'echo'ing your password anywhere.
Tangentially, if you precede a command with a space, then it won't show up in your shell history. (Double check to be sure, as this is likely a configurable option of your shell. e.g., 'histignorespace' in zsh.)
- npteljes 5y agoI agree with your points, but why showcase a super secure system with a flawed example? Also, so many things can go wrong with this setup, I'm inclined to think that this is one of the upsides of a password manager like KeePass.
- Anthony-G 5y agoI think you may have focused in on the tangential sentence rather than the point about it being a conceptual overview with Unix commands being used as a metaphor, i.e., not a literal example. E.g., they’re not typing `echo` commands in the same way that they’re not typing `gpg "make-key"` (which is not a real command).
- burntsushi 5y agoNo, you appear confused. 'pass' is pretty hard to misuse. It, at no point, makes it easy to put a password into shell history. You're getting caught up in a transcript to showcase the concepts. The actual implementation of 'pass' is quite secure. It does those things for you in a way that is secure, precisely so you don't have to worry about 'echo'ing passwords in plain text.