From: Jeff King <peff@peff.net>
Date: Thu, 10 Jul 2008 07:24:20 GMT
Subject: Re: [PATCH] Fix problem with authentification on http repository.
Message-ID: <20080710072420.GA5167@sigill.intra.peff.net>
In-Reply-To: <alpine.DEB.1.00.0807091341230.5277@eeepc-johanness>

On Wed, Jul 09, 2008 at 01:43:07PM +0200, Johannes Schindelin wrote:

> > Note that http://user:pass@server/path/ /should/ work (but that would 
> > need validation), though not a good idea on command line.
> 
> Well, now that the programs using URLs are all builtins, we can actually 
> do something about it.  We can edit out the "user[:pass]@" part out of 
> argv, which usually means that "ps" will not see it anymore.

Wouldn't there still be a race condition for publicly broadcasting your
password via ps?

-Peff