Re: Security hole in mysqlhotcopy?

2001-12-29 Thread Bogdan Stancescu
Ooops! Sorry, I tested it and it doesn't work! Sorry for misleading you... ;-) Bogdan Bogdan Stancescu wrote: > mysqlhotcopy -uroot -p test . > > Philip Mak wrote: > > > On Sun, 30 Dec 2001, Bogdan Stancescu wrote: > > > > > You can usually try providing an empty -p parameter and be asked for t

Re: Security hole in mysqlhotcopy?

2001-12-29 Thread Bogdan Stancescu
mysqlhotcopy -uroot -p test . Philip Mak wrote: > On Sun, 30 Dec 2001, Bogdan Stancescu wrote: > > > You can usually try providing an empty -p parameter and be asked for the > > password afterwards. > > Doesn't seem to work: > > [mysql@lina mysql]$ mysqlhotcopy -u root -p "" test . > DBI->connec

Re: Security hole in mysqlhotcopy?

2001-12-29 Thread Philip Mak
On Sun, 30 Dec 2001, Bogdan Stancescu wrote: > You can usually try providing an empty -p parameter and be asked for the > password afterwards. Doesn't seem to work: [mysql@lina mysql]$ mysqlhotcopy -u root -p "" test . DBI->connect(;host=localhost;mysql_read_default_group=mysqlhotcopy) failed:

Re: Security hole in mysqlhotcopy?

2001-12-29 Thread Bogdan Stancescu
You can usually try providing an empty -p parameter and be asked for the password afterwards. Bogdan Philip Mak wrote: > As far as I can tell, mysqlhotcopy does not provide a way of specifying > the password anywhere other than the command line (e.g. it doesn't seem > to read .my.cnf). --

Security hole in mysqlhotcopy?

2001-12-29 Thread Philip Mak
As far as I can tell, mysqlhotcopy does not provide a way of specifying the password anywhere other than the command line (e.g. it doesn't seem to read .my.cnf). Isn't this a security risk? I noticed that mysqlhotcopy *does* change its "ps" entry after it starts in order to mask the arguments, bu