search

MisterWil / abodepy

A thin Python wrapper for the Abode alarm API
MIT License
49 stars 17 forks source link

Security Issue: Specify user/password via config file rather than command line #20

Closed eharris closed 6 years ago

eharris commented 6 years ago

It is a rather large security problem to have user/password be on the command line, since any other user on the same machine can potentially see the login credentials simply with ps.

The user/password should be able to be specified via a config file of some kind. This also makes using command line functionality easier since the user and password don't have to be specified every time.

MisterWil commented 6 years ago

I added this ability with the cache functionality in v0.13.1. You should be able to do abodepy --username [username] --password [password] --cache abode.pickle and that will generate a file named 'abode.pickle' which will contain your username, password, and the new UUID requirement. After this you can do abodepy --cache abode.pickle and it'll utilize the cached information.