On Wed, Jul 09, 2008 at 01:43:07PM +0200, Johannes Schindelin wrote:
quoted
Note that http://user:pass@server/path/ /should/ work (but that would
need validation), though not a good idea on command line.
Well, now that the programs using URLs are all builtins, we can actually
do something about it. We can edit out the "user[:pass]@" part out of
argv, which usually means that "ps" will not see it anymore.
Wouldn't there still be a race condition for publicly broadcasting your
password via ps?
-Peff