Python Forum
How secure is the use of "secret" import?
Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
How secure is the use of "secret" import?
#8
(Nov-07-2023, 10:17 PM)ejwjohn Wrote: i was hoping that somewhere there was a solution that allowed you to store your "secrets" into the secure cloud then use an "import" function that allows you to access the cloud "secrets" to use within the Python script??
In the end, if the Python script accesses the secret, it means that it can read the information that gives access to the secret, such as a password or some encryption key, unless it asks the user to interactively enter a password (which of course can be compromised by key loggers).

Among the possible setups, the Python program could read a configuration file containing the location of the secret file, whether it be on the user's file system or in a cloud. It is the user's responsibility to manage the configuration file's permissions and the access to their user account. As @DeaD_EyE says, if a hacker can obtain the same permissions as the Python program, there seems to be no way to prevent it from accessing the secret.
Reply


Messages In This Thread
RE: How secure is the use of "secret" import? - by Gribouillis - Nov-08-2023, 07:03 AM

Possibly Related Threads…
Thread Author Replies Views Last Post
  Best way to secure API key when sharing quarinteen 2 404 Jan-19-2024, 04:46 PM
Last Post: deanhystad
  Extract Httponly, Secure, domain and path from a cookie randeniyamohan 0 1,709 Jan-26-2020, 04:59 PM
Last Post: randeniyamohan
  Secure App Data Storage for Kivy Android App JonPC 1 2,487 Nov-08-2019, 03:42 PM
Last Post: luke

Forum Jump:

User Panel Messages

Announcements
Announcement #1 8/1/2020
Announcement #2 8/2/2020
Announcement #3 8/6/2020