Johannes Truschnigg

Messing with the argument vector to obfuscate parameters is better than nothing, but it does not offer real confidentiality. There's a (usually short - but under high system load or other circumstances, that can be prolonged indefinitely) window of time between fork()/exec() and that part of your main() function running where the process table and pseudofiles in /proc will reproduce the specified password in the clear, for any user logged in to the system to read. In this case, the password will...