5 ms·

And what does scale have to do with logging any plaintext passwords?

• hn_throwaway_99 7y ago
  Because it was a bug. They most likely weren't doing this: log(request.password); But they had some code that did this: log(excludeSensitive(request. headers)); But then someone on a different team changed how passwords were sent so excludeSensitive was broken.
  • nihonde 7y ago
    Scrubbing passwords and other sensitive information from logs is such a basic requirement. It’s something you write a regression test for and never think about again.