4 ms·
My main problem with this is that it would require me to store my password, in clear text, in a shell script. I'm no security expert but that raises a red flag
by stevenleeg 14y ago
My main problem with this is that it would require me to store my password, in clear text, in a shell script.
I'm no security expert but that raises a red flag for me. I'd rather have some way of entering my password each time I want to back up, but this would also make the cron process impossible.
- ben1040 14y agoSee gmvault as mentioned in the comments here, it just saves an oauth token. Still can be used to access your mail but at least it can be easily revoked and isn't your clear text password.
- yaix 14y agoJust chmod the shell script to 700, so that only your account can read it, together with an encrypted HDD that should be quite save.
- waffle_ss 14y agoIf it's a shared box, you'd still have to hide the --pwd argument from `ps` process listings. You'd have to do something like make a ~/.gmail-pass file with the content "--pwd foobar", and call the script like this: cat ~/.gmail-pass | xargs python bagoma.py --email=foo@bar
- yaix 14y agoGood point, hadn't thought of the process list.