Security Considerations? about csvkeychain HOT 3 OPEN

On Nov 3, 2018, at 06:42, Lifepillar ***@***.***> wrote: Commit f713a2a has introduced an AppleScript dialog that prompts for a keychain's password. That is not a system dialog, it is a dialog under control of the script. The typed password is stored in a script variable. This means that the password is written to the script process's memory. Since AppleScript does not have explicit memory management, AFAIK it is not possible to control the persistence of the password in memory. The change was (reluctantly) made to make the script work in High Sierra (and possibly Sierra as well), where Keychain Access kept prompting for passwords regardless of Access Control settings. It seems to me that Mojave has fixed Keychain Access behaviour, so it might be possible to revert that change. I have to check, though. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or mute the thread.