4 ms·
Really? I’ve always felt like too much detail could further empower a potential attacker.
by e-clinton 4y ago
Really? I’ve always felt like too much detail could further empower a potential attacker.
- EvanAnderson 4y agoI would concede that there is a distinction between error messages meant for the general public vs. sysadmins. Make sure the log the sysadmin sees has actionable information in it, please!
- blooalien 4y agoI've always felt that user-facing error messages should be simple, clear, to-the-point, and should include a simple explanation how to contact the author, and where to find and send any relevant "user-local" log information which might be helpful.