3 ms·
Hmm why should passwords (hashed or not) be stored in logs though? I don’t see a reason for doing that. You could unset it (and/or other sensitive data) before
by tzhenghao 8y ago
Hmm why should passwords (hashed or not) be stored in logs though? I don’t see a reason for doing that. You could unset it (and/or other sensitive data) before dumping them into logs.
- Zombieball 8y agoThey shouldn’t. It was an unintentional bug
- patrickthebold 8y agoThey shouldn't. It was a mistake.
- Leka74 8y agoProbably logging the HTTP/S requests, which included usernames & passwords in plaintext.