Secure Passwords in Memory

Alex the_brain at mit.edu
Sat Sep 30 18:19:40 EDT 2000


> I don't think you're going to get the string zero'd out of memory
> without writing some C somewhere, but perhaps a better thing to do
> would be to write a setuid wrapper for the program that python is to
> call, or just run the python program as root.  I can't think of any
> situations that those two solutions wouldn't cover, offhand.

Actually, there might be something you could do by storing the password
in a buffer object.  I'm not sure.

Alex.

-- 
Speak softly but carry a big carrot.




More information about the Python-list mailing list