Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us> writes:
>> You can't securely do
>> echo $PASSWORD | backend
>> or
>> echo $PASSWORD > allegedly-secure-temp-file
> This is secure. echo is a shell builtin, and does not invoke a separate
> process with arguments.
echo is a builtin in ksh and derivatives, but I don't think it's safe
to assume it is a builtin everywhere...
regards, tom lane