#687  How secure is posting error logs on here?
Closed
Quin opened 2 years ago

I've been asked a lot to post logs here, and think how many hours would be sunk to edit them as to not leak any information. Isn't what is posted here publicly available for anyone to view?

Robin Shen changed state to 'Closed' 2 years ago
Previous Value Current Value
Open
Closed
Robin Shen commented 2 years ago

It will be publicly accessible. I deleted all your logs to secure your information (Saved to my disk for further investigation of the issue).

Quin commented 2 years ago

And what about when I paste them into the issues?  Isn't there a window of opportunity where they're posted online before being removed?

Robin Shen commented 2 years ago

Yes, of course. Issues are publicly accessible. Your logs are already there for quite some time...

Quin commented 2 years ago

May I request that there is a way to securely and privately post logs, etc., as I have found that a project I am working on (and posted the logs about) has been facing some issues on their site.

It may be coincidence, but it has got me thinking about possible vulnerabilities.

Robin Shen commented 2 years ago

There is no such approach currently. OneDev is open source and I also provide help for free...

Robin Shen commented 2 years ago

Logs help my investigation, but you may choose not to post logs. In that case, you may need to dig through the logs to find important information on your own.

Quin commented 2 years ago

May I request that there is a way to securely and privately post logs, etc., as I have found that a project I am working on (and posted the logs about) has been facing some issues on their site.

It may be coincidence, but it has got me thinking about possible vulnerabilities.

Robin Shen commented 2 years ago

You may send your logs directly to me: [robin AT onedev DOT io]

issue 1 of 1
Type
Question
Priority
Normal
Assignee
Not assigned
Issue Votes (0)
Watchers (4)
Reference
onedev/server#687
Please wait...
Page is in error, reload to recover