从任务管理器启动程序和隐藏命令行参数 [英] Launch process and hide command line parameters from Task Manager
问题描述
我不知道，如果这个问题更适合于或＃1超级用户或什么StackExchange网站...
I'm not sure if this question is more appropriate for Stackoverflow or SuperUser or what StackExchange site...
基本上我推出第三方应用从C＃与的Process.Start 有几个命令行参数。其中一个命令行参数是一个密码。
Basically I'm launching a third-party app from C# with Process.Start with several command line parameters. One of those command line parameters is a password.
我觉得我做到处确保该密码在我的应用程序，一个真正的好工作，除非你打开进程在任务管理器选项卡，您可以添加命令行栏目，看到所有这些命令行参数。
I think I'm doing a really good job of securing that password everywhere in my app, except if you open the Processes tab in Task Manager, you can add the "Command Line" column and see all of those command line parameters.
谁能想到一个办法，不知怎的，启动一个进程已在命令行PARAMS隐藏？ ？这是可能在所有
Can anyone think of a way to launch a process that somehow has the command line params hidden? Is this possible at all?
感谢您
编辑：
这是一个Windows服务包装器plink.exe（SSH /腻子的东西）。它会提示输入密码，如果我不指定在命令行中输入密码，但我得到这个奇怪的警告：
This is a Windows Service wrapper for plink.exe (SSH/Putty stuff). It will prompt for a password if I don't specify the password in the command line, but I get this weird warning:
Plink.exe - 3/30/2013 2:40:47 PM - Attempting keyboard-interactive authentication
Plink.exe - 3/30/2013 2:40:47 PM - Server refused keyboard-interactive authentication
Plink.exe - 3/30/2013 2:40:49 PM - user@hostname.com's password:
我已指定重定向标准输入，但也许我会继续在寻找到，看看我能工作，解决它。此外，由于大卫赫弗南建议，我会进一步调查佳丽。谢谢大家！ - 我会发布更新一次我想出一个更好的解决方案。
I have specified to redirect the standard input, but perhaps I will continue looking in to that and see if I can work-around it. Also, as David Heffernan recommended, I'm going to look further into Pageant. Thank you everyone - I will post an update once I figure out a better solution!
推荐答案
有没有办法通过一个命令行参数的过程，这样的过程可以看到它，但一切在系统中不能。
There's no way to pass a command line argument to a process, so that the process can see it, but everything else in the system cannot.
这是一个明显的缺陷，当程序允许密码作为参数传递，它通常用于方便，是不是担心窃听用户来完成的。精心设计的程序通常会提供，此外，身份认证等安全手段。
This is an obvious flaw and when programs allow passwords to be passed as arguments, it's usually done for convenience for the user that is not concerned about eavesdroppers. Well designed programs will usually provide, in addition, other secure means of authentication.
这篇关于从任务管理器启动程序和隐藏命令行参数的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
