#24741: Consider redacting usernames in notice level logs
------------------------------+--------------------------------
Reporter: teor | Owner: (none)
Type: defect | Status: new
Priority: Medium | Milestone: Tor: 0.3.4.x-final
Component: Core Tor/Tor | Version:
Severity: Normal | Keywords:
Actual Points: | Parent ID:
Points: 1 | Reviewer:
Sponsor: |
------------------------------+--------------------------------
macOS uses a person's first and last name as their username by default.
(I'm not sure what Windows or other unix systems do.)
This means that logs can contain a user's full name, and sometimes (at
info level?) their IP address.
We should think about the risks here, particularly for users that post
logs to the bug tracker.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24741>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
[email protected]
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs
