Skip to content
This repository was archived by the owner on Dec 30, 2024. It is now read-only.

Bare minimum password obfuscation#6

Open
toyg wants to merge 3 commits intothesanjeetc:masterfrom
toyg:encrypted_credentials
Open

Bare minimum password obfuscation#6
toyg wants to merge 3 commits intothesanjeetc:masterfrom
toyg:encrypted_credentials

Conversation

@toyg
Copy link

@toyg toyg commented Aug 5, 2017

This patch implements bare-minimum credential obfuscation. User and password must be added to a file called .siricontrolsecret, which can live in $HOME or alongside the main script. The password is b64encoded on first run.

This was written with compatibility in mind; it should work with python 2.3 and above (and only because I lazily added a set() call to deduplicate a list - otherwise it would have probably worked on 2.2 or even lower). I tested with 2.6, 2.7 and 3.6.

This is NOT a secure implementation, it's only the bare minimum to keep people from saving cleartext passwords - somebody even ended up saving their gmail password to github where everybody can see it!

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant