3 ms·
I get the impression that often it isn't laziness but the concept that error details leak information to an attacker and are therefore a vulnerability. I disag
by lucianbr 7mo ago
I get the impression that often it isn't laziness but the concept that error details leak information to an attacker and are therefore a vulnerability.
I disagree with this view, but it definitely exists.
- superjan 7mo agoYeah, along those lines we have requirements on never logging PII, and not logging anything that potentially contains PII, such as folder names.
- justinclift 7mo agoMaybe tokenise the PII part of the folder name when outputting it? ie `$HOME`/.config/foo/stuff.cfg` rather than `/home/joebloggs/foo/stuff.cfg`?
- Terr_ 7mo agoOr have an encrypted data portion, so that the sensitive details can be revealed as-needed, and redaction occurs by rotating a key. Obviously that depends on the messages being infrequent in production logging levels.
- EvanAnderson 7mo agoIn a message returned by a server to a client I suppose it's defensible. For writing to syslog, event log, a log file, etc, it's not.