Hacker News Reader

Comment by nixosbestos | Hacker News Reader

> Have you guys added the ability to cleanse / watch command strings for sensitive items like secrets, keys etc? Seems easier than ever with advances in lightweight LLMs.

Please this has to be satire, right?

View on HN

Some games have this feature called "streamer mode", where some text that would normally be on screen is removed, like username or party codes. Makes sense for a terminal to do the same for other sensitive data.

Would actually be nice to standardize an environment variable for this. Obviously not something that you should rely upon when running random tools but can be a nice failsafe.

It would be nice to censor my username from the prompt without changing my shell prompt.

No idea if it does this already though.

The file format is just plain text, you can use sed to change the username.

Why would it be satire? Seems like a real use case

s/mysekretpassword/••••••••••••••••/g

What about that should involve a large language model?

Obviously the part that determines what part of the output might be a password or other sensitive value.

Threads like this want me to throw my laptop into a volcano and lobotomize myself. I have a bridge if you think an LLM can reliably generically redact passwords. Especially given the intersection of password quality and the type of person to let their passwords leak into output of a recorded terminal session.

I love leaving my baseline security in the hands of a hallucinating, unreliable token generator.

I'm sorry, I don't even know how to explain that this type of feature would be such a mis-feature, it's hard to even know how to explain it to somehow for whom its not obvious.

Reply on news.ycombinator.com