4 ms·
As someone who has recorded 500+ tech video screencasts while occasionally dealing with sensitive information, here's what I've come up with: 1. Do whatever yo
by nickjj 5y ago
As someone who has recorded 500+ tech video screencasts while occasionally dealing with sensitive information, here's what I've come up with:
1. Do whatever you can to minimize sensitive info exposure before you even start streaming or recording. For example I created a shell script which backs up and clears my shell history and does other things[0]. Make a note to use a browser where your history is cleared too.
2. Sometimes it's easier to say screw it and show the sensitive information with full intent that you're going to change your API keys, password or whatever sensitive data is shown. This ends up being much better because now you don't need to worry about blurring anything because you know you'll re-roll your keys. This is really good for pre-recorded videos vs live streams.
3. If you need to hide secrets, put all secrets into an .env file and have a .env.example file handy to show how to set them up without showing your real secrets. This is another way to eliminate ever having to blur anything and have a 0% chance of ever exposing a secret.
4. If you need to hide something, put a solid color over it instead of blurring it so it can't be reversed.
5. One of the pain points with hiding something in a video is the sensitive info might be on a page where you're scrolling up and down on the page which means you need to move your solid color rectangle or expand it based on which frame is showing. But overall this isn't too bad with most video editors since you can click and drag a rectangle onto a specific point in your timeline. If you adhere to the first 3 steps, you'll often only need minor hiding in all of your streams and videos.
6. Often times you're hiding unexpected things, like maybe you're logged into GitHub to make a video about an open source project but you view your GitHub feed which shows a list of private organizations you do freelance work for. This is the type of stuff to watch out for, which IMO also makes certain editor plugins that try to hide secrets not that useful since you can hide them in other ways, and it sets you up with a false sense of security because there's many other sensitive things outside of your editor to think about.
I'm not trying to deter you from building your tool, but I suppose I'm having trouble seeing how I would use it in practice. I'd be curious to hear how other folks handle this.
[0]: https://nickjanetakis.com/blog/bash-aliases-to-prepare-recording-videos https://nickjanetakis.com/blog/bash-aliases-to-prepare-recor...
- faeyanpiraat 5y agoIts particularly easy to miss info leaks when you manipulate fields which have some kind of autofill or live search functionality. You start up something by typing into the start menu, but between pressing the first and second letters for some frames unintended documents could flash up. You need to try typing the alphabet one by one into these fields to see whether anything sensitive comes up. Edit: nice recommendations on your part!
- Fnoord 5y agoYeah, autocomplete can screw things up. It can do so in a browser when you show a friend (or co-employee or your child) something as well. It is something to keep in mind. If you use a VM or burner device the chance of such happening is negligible. You can also use a second account which has less rights than your main account. A feature which Google's Android conveniently has (guest mode).
- dceddia 5y agoAutocomplete is super annoying for this. I ended up setting up a separate Chrome profile for screencasting, but you can also use Guest mode. Either way will give you a separate history, no autocomplete, and no extensions cluttering up the menu bar. Wrote up a little guide here: https://daveceddia.com/setup-chrome-for-screencasting/ https://daveceddia.com/setup-chrome-for-screencasting/
- StavrosK 5y agoI had much the same problems, but I came up with a different solution: https://gitlab.com/stavros/itsalive https://gitlab.com/stavros/itsalive It's a Live is a piece of software that lets you prerecord all your commands (by typing them all up in a simple text file) and then replays them when you press keys on the keyboard. If you run through a rehearsal once or twice, there's no risk of exposing anything (since it'll always replay the presentation the same way), and it has some niceties like showing you the previous/current/next commands, allows you to take over control and resume easily, etc. I quite like it.