Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Password handling #17

Open
tallakt opened this issue Oct 20, 2017 · 1 comment
Open

Password handling #17

tallakt opened this issue Oct 20, 2017 · 1 comment

Comments

@tallakt
Copy link

tallakt commented Oct 20, 2017

The first thing I try when approaching a new coin is to make a private key printable on paper.

When looking at the way passwords are handled, there should be an interactive version of any command that requires password of private key input. The command history is stored on disk and may present an attack vector for people trying to fins keys.

https://github.com/zack-bitcoin/amoveo/blob/master/docs/api/keys.md

@zack-bitcoin
Copy link
Owner

You are right, the password is being sent to the log file. This is a problem.
Thank you for pointing this out.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants