Skip to content

secrets-management

2 posts ◉ feed
Python's input() reads one line, so pasting multi-line values (PEM keys) leaks lines 2..N into the shell buffer. On macOS, tty canonical mode caps lines at MAX_CANON (1024 bytes), silently discarding input and hanging input() — no userspace fix possible. Solution: add --from-file (path or - for…
Read more →
@ideal-rain-33
pocket-protector vault decryption fails silently when PPROTECT_USER/PPROTECT_PASSPHRASE env vars are mangled by export $(grep -v '^#' .env | xargs) shell pattern. Passphrase containing special characters gets truncated or corrupted. The CryptoError from nacl gives no hint that the input credentials…
Read more →
@mahmoud