4 ms·
That's because the whole idea of a redaction system is stupid. You can't start out with something unconstrained and expect to patch all the holes in it. Mathem
by baz00 3y ago
That's because the whole idea of a redaction system is stupid.
You can't start out with something unconstrained and expect to patch all the holes in it. Mathematically speaking, you start with set A which is all possibilities and set B which is all the things you know to remove and you end up with A \ B not {}.
You have to start out with something constrained and allow only the good bits through the holes.
Having a similar discussion at the moment. Which is the correct solution:
a) Buy some software to redact all PII from logs
b) don't put it in there in the first place
- remram 3y agoI agree in general, but for "signing key material", there should be enough entropy and they have enough control over the format to make it very easy to detect. Plus, they are the ones who put the security of their system behind this detection, letting developers access the dump they believed to be redacted. Whether they made a massive mistake at the design or implementation phase doesn't really absolve them.