Feature: Provide means to use shared memory blob as password (automation, preventing accidental leakage)
还没有人认领这个 Issue。
评估
调研方向
未指定任何文件、测试或入口点。首先审查该提案及其对 issue #1 的引用，然后定义用于传递共享内存密码的必要接口、其处理方式和擦除保证，以及如何通过完成工作来证明自动化不会通过命令行泄漏。
由索引模型根据 Issue 内容生成。
描述
From @heinrich-ulbricht on June 10, 2016 13:3
This is a feature proposal concerning interoperability and integration with external tools and scripts.
What about a way to pass a password to Cryptomator without having to enter it manually (=automation) while preventing the password from (accidentally) leaking to log files.
#1 one day probably solves the first requirement: automation. But passing passwords via command line bears the risk of some tools (system log, usual logging tools) capturing the command line and thus the password.
Could we instead provide a pointer to a more volatile location in (shared) memory? Another tool could put the password there and launch Cryptomator with a pointer to the shared memory location. A nice service of Cryptomator could be to erase the memory right after reading the password.
The password thus should be safe from accidental leakage. Only if an attacker explicitly targets this mechanism he would be able to get the password from memory. But usual key loggers, general purpose monitoring tools etc. are no danger anymore.
(Note: key files are no solution for me since even a temporary file might somehow be mirrored by backup software.)
What do you think?
Copied from original issue: cryptomator/cryptomator#290
- 主要语言
- Java
- 星标
- 428
- 派生
- 52
- PR 合并指标
- 30 天内没有已合并 PR
贡献指南
从这里开始
- 先读完整个 Issue，再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库，在一个分支上完成修改。
- 提交 Pull Request，并在描述里引用这个 Issue 编号。
cryptomator/cli 的其他 Issue
-
难度 3/5 1-2 天 新手友好度 55/100
cryptomator/cli#102 ·
-
难度 4/5 3-5 天 新手友好度 45/100
cryptomator/cli#100 · 1 个 reaction ·
-
难度 3/5 1-2 天 新手友好度 42/100
cryptomator/cli#97 ·
-
难度 4/5 3-5 天 新手友好度 35/100
cryptomator/cli#96 ·
-
难度 3/5 1-2 天 新手友好度 45/100
cryptomator/cli#95 ·
相似的 Issue
-
awaiting triage bug Causes friction Hop Gui P1 P2 Transforms
难度 2/5 1-3 小时 新手友好度 75/100
-
难度 2/5 1-3 小时 新手友好度 75/100
apache/flink-agents#1152 ·
-
难度 2/5 1-3 小时 新手友好度 75/100
-
难度 2/5 1-3 小时 新手友好度 70/100
jenkinsci/blueocean-plugin#5417 ·
-
难度 2/5 1-3 小时 新手友好度 75/100
objectionary/eo-graphs#75 ·