5 ms·

Missing is probably the the most important thing about logging: be vigilant and never log sensitive user information or secret values like password reset tokens

Missing is probably the the most important thing about logging: be vigilant and never log sensitive user information or secret values like password reset tokens. Quite a few cases of compromised secondary/tertiary logging infrastructure leading to exploits of primary systems.

sethammons 8y ago
"be vigilant" seems to be the mind set, but I can't help but feel a system that protects from accidentally logging secrets is what is needed. Due to the varied way people log and what they log and when, it is likely unsolvable in the general sense. We have structured logs (serialized objects as json that auto-get default fields like app name, timestamp, and such). These structures can have fields tagged as sensitive, and those values are redacted. This is still human error prone.
- Radim 8y ago
  > …a system that protects from accidentally logging secrets… That ecosystem exists. There are SW tools, both on-prem and (less interestingly) cloud/SaaS, that sit in the middle and look for personal and sensitive data. You plug into their API, and then get to decide what to do when such information is detected: ignore, quarantine, redact, alert… (Disclaimer: I built one such tool, https://pii-tools.com https://pii-tools.com)
  - sethammons 8y ago
    I'll look into this, thanks! I'm not sure how you will know hunter2 is a password, but interested to find out :)
- dmitryminkovsky 8y ago
  Yes “being vigilant” is not even actually sufficient.
linsomniac 8y ago
Totally agree. Sentry has password scrubbing functionality, BTW.