Flight recorder captures PTY write-side bytes, i.e. unechoed input, sudo passwords, ssh passphrases

[danneu]

danterm should redact / not record write-side bytes while the pty has ECHO off. at least in the normal tape. maybe the opt-in complete tape keeps all bytes.