4 ms·
Tangential: With the recent screw-up of Facebook logging user passwords in cleartext in (what I presume to be) this type of logging, I thought (before clicking)
by godot 8y ago
Tangential: With the recent screw-up of Facebook logging user passwords in cleartext in (what I presume to be) this type of logging, I thought (before clicking) that an article named "Application-Level Logging Best Practices" would say something about stripping out passwords etc. when logging anything that involves user inputs. In fact, I thought it was what prompted this post. :)
- objectified 8y agoIn case you are still interested in reading about the security aspect of logging, there is the OWASP Logging Cheat Sheet dedicated to this: https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Logging_Cheat_Sheet.md https://github.com/OWASP/CheatSheetSeries/blob/master/cheats...
- stefant 8y agoThx for sharing, interesting.