pdo-smith/5gtop

Passing password on cmdline is a security risk

Opened this issue · 0 comments

arekm commented

On multiuser machine, without proc listing restrictions, anyone can do "ps aux" and grab login/password being used.

Process title could be changed (setproctitle python module for example) or better ask for password interactively (getpass.getpass()).

ps. modem here also supports https:// (in addition to http://) connections to its API