Re: [HACKERS] Bad security practice in oid2name and pgbench

2007-12-08 Thread Andrew Dunstan
Tom Lane wrote: While going through the contrib documentation, I notice that both oid2name and pgbench allow specifying a password on the command line, ie -P password This is known to be horribly bad security practice (because the password is exposed to everyone else on the machine), a

[HACKERS] Bad security practice in oid2name and pgbench

2007-12-08 Thread Tom Lane
While going through the contrib documentation, I notice that both oid2name and pgbench allow specifying a password on the command line, ie -P password This is known to be horribly bad security practice (because the password is exposed to everyone else on the machine), and we don't allow an