Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

My main problem with this is that it would require me to store my password, in clear text, in a shell script.

I'm no security expert but that raises a red flag for me. I'd rather have some way of entering my password each time I want to back up, but this would also make the cron process impossible.



See gmvault as mentioned in the comments here, it just saves an oauth token. Still can be used to access your mail but at least it can be easily revoked and isn't your clear text password.


Just chmod the shell script to 700, so that only your account can read it, together with an encrypted HDD that should be quite save.


If it's a shared box, you'd still have to hide the --pwd argument from `ps` process listings. You'd have to do something like make a ~/.gmail-pass file with the content "--pwd foobar", and call the script like this:

  cat ~/.gmail-pass | xargs python bagoma.py --email=foo@bar


Good point, hadn't thought of the process list.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: