in reply to Re^2: How to hide a password in a script?
in thread How to hide a password in a script?

The point I was making in my post is exactly what beable says in Re^3: How to hide a password in a script?. By definition, the obfuscated code will have to generate an unobfuscated password; anyone who can read and therefor run the code, can thus recover the password. And they don't need to deobfuscate your code.

Do you understand now? Whether you obfuscate the code or not is irrelevant. It does not hold up an attacker for even a moment.

You did not understand the point of my signature either. It is a monition to remember that solutions are often used beyond the scope they were originally built in; and that you should therefor never forgo a certain measure of robustness. It actually underscores my point with regard to your situation: do you know how long your false security measure will be in use, or in what context it will exist five years from now?

Do not do this. Put the plaintext password in a permissions-protected file. Not only will this prevent anyone from getting the wrong impression about the security of the password, it will actually be effective.

Makeshifts last the longest.

  • Comment on Re^3: How to hide a password in a script?