[Hackage] #268: cabal upload asks for a password in plain text
#268: cabal upload asks for a password in plain text ----------------------------+----------------------------------------------- Reporter: guest | Owner: Type: defect | Status: new Priority: normal | Milestone: Component: Cabal library | Version: HEAD Severity: normal | Keywords: Difficulty: normal | Ghcversion: 6.8.2 Platform: | ----------------------------+-----------------------------------------------
Cabal upload asks for your password in plain text. That one is security related - you are asking for someones password, and giving the appearance that you aren't overly fussed about keeping it secret.
I'm happy to add that if anyone can figure out the code to do it. It's presumably different on ANSI terminals and the Windows command console.
getChar in a loop? You can always do: c <- getChar putChar '*' If you so feel like it. You can even use putStr "\b \b" to move back one character, even on Windows. -- Ticket URL: <http://hackage.haskell.org/trac/hackage/ticket/268> Hackage <http://haskell.org/cabal/> Hackage: Cabal and related projects
#268: cabal upload asks for a password in plain text ----------------------------+----------------------------------------------- Reporter: guest | Owner: Type: defect | Status: new Priority: normal | Milestone: Component: Cabal library | Version: HEAD Severity: normal | Resolution: Keywords: | Difficulty: very easy (<1 hour) Ghcversion: 6.8.2 | Platform: ----------------------------+----------------------------------------------- Changes (by duncan): * difficulty: normal => very easy (<1 hour) -- Ticket URL: <http://hackage.haskell.org/trac/hackage/ticket/268#comment:1> Hackage <http://haskell.org/cabal/> Hackage: Cabal and related projects
#268: cabal upload asks for a password in plain text ----------------------------+----------------------------------------------- Reporter: guest | Owner: Type: defect | Status: closed Priority: normal | Milestone: Component: Cabal library | Version: HEAD Severity: normal | Resolution: fixed Keywords: | Difficulty: very easy (<1 hour) Ghcversion: 6.8.2 | Platform: ----------------------------+----------------------------------------------- Changes (by duncan): * status: new => closed * resolution: => fixed Comment: Done. {{{ Thu May 1 22:44:56 BST 2008 Duncan Coutts <duncan@haskell.org> * Don't echo when prompting for the hackage upload password. Fixes ticket #268. And use newtypes for the username and password, just to be more sure we're not mixing them up with other strings. }}} So it doesn't echo '*'s instead it just turns off terminal echoing which hopefully is more portable. We still use getLine rather than getChar so that uses the OS/terminal's line editing facilities which means you can still use backspace etc. -- Ticket URL: <http://hackage.haskell.org/trac/hackage/ticket/268#comment:2> Hackage <http://haskell.org/cabal/> Hackage: Cabal and related projects
participants (1)
-
Hackage