[Hackage] #268: cabal upload asks for a password in plain text

Hackage trac at galois.com
Wed Apr 9 17:55:24 EDT 2008

#268: cabal upload asks for a password in plain text
  Reporter:  guest          |        Owner:       
      Type:  defect         |       Status:  new  
  Priority:  normal         |    Milestone:       
 Component:  Cabal library  |      Version:  HEAD 
  Severity:  normal         |     Keywords:       
Difficulty:  normal         |   Ghcversion:  6.8.2
  Platform:                 |  
 >  > Cabal upload asks for your password in plain text. That one is
 >  > security related - you are asking for someones password, and giving
 >  > the appearance that you aren't overly fussed about keeping it secret.
 >  I'm happy to add that if anyone can figure out the code to do it. It's
 >  presumably different on ANSI terminals and the Windows command console.

 getChar in a loop? You can always do:

 c <- getChar
 putChar '*'

 If you so feel like it. You can even use putStr "\b \b" to move back one
 character, even on Windows.

Ticket URL: <http://hackage.haskell.org/trac/hackage/ticket/268>
Hackage <http://haskell.org/cabal/>
Hackage: Cabal and related projects

More information about the cabal-devel mailing list