Clever uses of pass, the Unix password manager
vitalyparnas.com
Clever uses of pass, the Unix password manager
1–10 of 154 posts
Re: Clever uses of pass, the Unix password manager
#2For the curl command though written like it won't show up in history, this will still show up in process parameters
To fix this as well pass it into curl as a config via eg: curl [...] -K- <<< "--header auth:$(pass mysecret)"
Re: Clever uses of pass, the Unix password manager
#3FYI for those interested in CLI password management, there is a pretty good CLI for LastPass called lpass that even supports your Yubikeys.
Re: Clever uses of pass, the Unix password manager
#4That's quite ... Clever. Now I can version my mbsyncrc and even my shell history without worrying about secrets leak.
Re: Clever uses of pass, the Unix password manager
#5been using pass for more than 3 years now never had an issue, great CLI tool
Re: Clever uses of pass, the Unix password manager
#6For the curl command though written like it won't show up in history, this will still show up in process parameters To fix this as well pass it into curl as a config via eg: curl [...] -K- <<< "--header auth:$(pass mysecret)"
curl -H/--header itself also takes a file name prefixed by @, including - for stdin. So you could go curl -H@- <<<'API-Key: Foobar', or if you need to specify multiple sensitive headers, curl -H@<(echo API-Key: Foo) -H@<(echo Pre-Shared: Bar)
Re: Clever uses of pass, the Unix password manager
#7For the curl command though written like it won't show up in history, this will still show up in process parameters To fix this as well pass it into curl as a config via eg: curl [...] -K- <<< "--header auth:$(pass mysecret)"
And this matters a lot because history is normally only accessible to the current user (and root), but process command line arguments are normally accessible to all users.
Re: Clever uses of pass, the Unix password manager
#8I use pass along with passff and my yubikey for gpg decryption of the password store and gpg-ssh syncing from my home git pass db. Works great
Re: Clever uses of pass, the Unix password manager
#9Looks very neat; nice Unix’y solution. Would love this to integrate with Bitwarden which I use on my phone.
Re: Clever uses of pass, the Unix password manager
#10That's quite ... Clever. Now I can version my mbsyncrc and even my shell history without worrying about secrets leak.
Be sure to protect those secrets though -- see eg peer comments about process params (made shortly after yours)