How secure is posting error logs on here? (OD-687)
Quin opened 4 years ago

I've been asked a lot to post logs here, and think how many hours would be sunk to edit them as to not leak any information. Isn't what is posted here publicly available for anyone to view?

  • Robin Shen changed state to 'Closed' 4 years ago
    Previous Value Current Value
    Open
    Closed
  • Robin Shen commented 4 years ago

    It will be publicly accessible. I deleted all your logs to secure your information (Saved to my disk for further investigation of the issue).

  • Quin commented 4 years ago

    And what about when I paste them into the issues?  Isn't there a window of opportunity where they're posted online before being removed?

  • Robin Shen commented 4 years ago

    Yes, of course. Issues are publicly accessible. Your logs are already there for quite some time...

  • Quin commented 4 years ago

    May I request that there is a way to securely and privately post logs, etc., as I have found that a project I am working on (and posted the logs about) has been facing some issues on their site.

    It may be coincidence, but it has got me thinking about possible vulnerabilities.

  • Robin Shen commented 4 years ago

    There is no such approach currently. OneDev is open source and I also provide help for free...

  • Robin Shen commented 4 years ago

    Logs help my investigation, but you may choose not to post logs. In that case, you may need to dig through the logs to find important information on your own.

  • Quin commented 4 years ago

    May I request that there is a way to securely and privately post logs, etc., as I have found that a project I am working on (and posted the logs about) has been facing some issues on their site.

    It may be coincidence, but it has got me thinking about possible vulnerabilities.

  • Robin Shen commented 4 years ago

    You may send your logs directly to me: [robin AT onedev DOT io]

issue 1/1
Type
Question
Priority
Normal
Assignee
Not assigned
Issue Votes (0)
Watchers (4)
Reference
OD-687
Please wait...
Connection lost or session expired, reload to recover
Page is in error, reload to recover