dcr-split-ticket-matcher icon indicating copy to clipboard operation
dcr-split-ticket-matcher copied to clipboard

Private passphrase showing digits on terminal

Open rodrigondec opened this issue 6 years ago • 4 comments

The splitticketbuyer CLI asks for my private wallet passphrase.

The input on terminal for the passprhase doesn't hide my input digits image

This goes against every security principle I know!

rodrigondec avatar Nov 19 '19 04:11 rodrigondec

I was pretty sure I documented this somewhere, but seems that I didn't.

This follows the same pattern as for unlocking the wallet for CLI users, so you need to use the promptsecret app (see the docs for unlocking dcrwallet when running (promptsecret | splitticketbuyer ...).

But anyway, I'll see to more explicitly call that out and bring in echo off.

matheusd avatar Nov 19 '19 19:11 matheusd

Yes, I followed the oficial client CLI docs. And it didn't mention the promptsecret.

Ty

rodrigondec avatar Nov 19 '19 19:11 rodrigondec

Found the docs with instructions on manual configuration docs.

Didn't access this link on my first configuration. Should it be on another page as well?

rodrigondec avatar Nov 21 '19 05:11 rodrigondec

I wrote a bash script which will read from stdin for your password without revealing it in the terminal. The script is available here. The script will also automatically retry buying tickets if previous attempt failed.

chen-ky avatar Jan 01 '21 04:01 chen-ky