Hacker News Reader

This was reported on Sep 06 2011... a suggested fix in the ticket was "should strip from history like .auth()".

Has it been fixed? What is the implications of having it in the console history?

I tested some stuff with MongoDB about a month ago and I did notice the shell-history-thing with addUser at that time.

Edit: It is not fixed in 2.0.2 at least. (Tested now)

Edit: Looks like it's available only in the local user history of the machine you perform the addUser.

So I guess the risk is low.