Hacker News new | ask | show | jobs
by duaneb 4773 days ago
How is the environment any less secure than memory? If someone can read or mutate your environment, you should assume your app is already compromised and OS-level permissions aren't going to do anything.
2 comments

Certain weird-shit UNIX operating systems do not provide privacy for a process's environment. (eg. another user on the same box can see them with 'ps e'). More relevantly, POSIX does not require it. The same is not true of process memory.
Most people probably set the environment for all processes not just on a need to know basis perhaps.