From 5a9437f049b4f139b7f21fcbbdb829bf2c198377 Mon Sep 17 00:00:00 2001
From: Ted Unangst <tedu@tedunangst.com>
Date: Wed, 10 Apr 2019 08:16:29 -0400
Subject: [PATCH] use ssh/terminal to read a password without echo.

---
 util.go | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/util.go b/util.go
index 5369bee..17ea8af 100644
--- a/util.go
+++ b/util.go
@@ -29,6 +29,7 @@ import (
 	"strings"
 
 	"golang.org/x/crypto/bcrypt"
+	"golang.org/x/crypto/ssh/terminal"
 	_ "humungus.tedunangst.com/r/go-sqlite3"
 )
 
@@ -71,11 +72,11 @@ func initdb() {
 	signal.Notify(c, os.Interrupt)
 	go func() {
 		<-c
-		fmt.Printf("\x1b[?12;25h\x1b[0m")
 		fmt.Printf("\n")
 		os.Remove(dbname)
 		os.Exit(1)
 	}()
+
 	for _, line := range strings.Split(string(schema), ";") {
 		_, err = db.Exec(line)
 		if err != nil {
@@ -96,14 +97,14 @@ func initdb() {
 		log.Print("that's way too short")
 		return
 	}
-	fmt.Printf("password: \x1b[?25l\x1b[%d;%dm                 \x1b[16D", 30, 40)
-	pass, err := r.ReadString('\n')
-	fmt.Printf("\x1b[0m\x1b[?12;25h")
+	fmt.Printf("password: ")
+	passbytes, err := terminal.ReadPassword(1)
+	fmt.Printf("\n")
 	if err != nil {
-		log.Fatal(err)
+		log.Print(err)
 		return
 	}
-	pass = pass[:len(pass)-1]
+	pass := string(passbytes)
 	if len(pass) < 6 {
 		log.Print("that's way too short")
 		return