> Yuri Samoilenko wrote:
>> What do you mean when say "insecure"? Storing login and password in filesystem and then read it and pass to http request manually is secure? Insecure is availability to pass login/password in plain form like "http://user:password / 192.168.1.1:3128" but how it linked to Ruby?
>
> I'm not talking about files, but environment variables.  On some operating systems, a process environment variable is visible from any users, not only you.  Exposing authorization info to that sort of area is not a safe thing.  ENV['http_proxy'] should not include such info.  Further reading: http://yong321.freeshell.org/computer/ProcEnv.txt


The document says Solaris 8 or older is unsecure. OK. But so what? Who
care? I believe nobody need to care it.
Modern OS don't have such mistake.

Unsubscribe: <mailto:ruby-core-request / ruby-lang.org?subject=unsubscribe>
<http://lists.ruby-lang.org/cgi-bin/mailman/options/ruby-core>