3 ms·
In my sysadmin work I curse every developer who makes me fire up strace, tcpdump, procmon, Wireshark, etc, because they couldn't be bothered to actually say wha
by EvanAnderson 7mo ago
In my sysadmin work I curse every developer who makes me fire up strace, tcpdump, procmon, Wireshark, etc, because they couldn't be bothered to actually say what file couldn't be found, what TCP connection failed to be established. etc.
- lucianbr 7mo agoI get the impression that often it isn't laziness but the concept that error details leak information to an attacker and are therefore a vulnerability. I disagree with this view, but it definitely exists.
- superjan 7mo agoYeah, along those lines we have requirements on never logging PII, and not logging anything that potentially contains PII, such as folder names.
- justinclift 7mo agoMaybe tokenise the PII part of the folder name when outputting it? ie `$HOME`/.config/foo/stuff.cfg` rather than `/home/joebloggs/foo/stuff.cfg`?
- Terr_ 7mo agoOr have an encrypted data portion, so that the sensitive details can be revealed as-needed, and redaction occurs by rotating a key. Obviously that depends on the messages being infrequent in production logging levels.
- EvanAnderson 7mo agoIn a message returned by a server to a client I suppose it's defensible. For writing to syslog, event log, a log file, etc, it's not.