dcrwallet exposes the RPC password in the process list

decred / dcrwallet

A secure Decred wallet daemon written in Go (golang).

https://decred.org

ISC License

216 stars 155 forks source link

dcrwallet exposes the RPC password in the process list #48

Closed jyap808 closed 8 years ago

jyap808 commented 8 years ago

Running this command dcrwallet -u user -P password

The plain text password is displayed.

jcvernaleo commented 8 years ago

You can specify the username and password in the config file instead which will not show anything in the process list. jcv@koopa ~ $ cat ~/.dcrwallet/dcrwallet.conf [Application Options]

username=USER password=PASSWORD