#24741: Consider redacting usernames in notice level logs ------------------------------+-------------------------------- Reporter: teor | Owner: (none) Type: defect | Status: new Priority: Medium | Milestone: Tor: 0.3.4.x-final Component: Core Tor/Tor | Version: Severity: Normal | Keywords: Actual Points: | Parent ID: Points: 1 | Reviewer: Sponsor: | ------------------------------+-------------------------------- macOS uses a person's first and last name as their username by default. (I'm not sure what Windows or other unix systems do.)
This means that logs can contain a user's full name, and sometimes (at info level?) their IP address. We should think about the risks here, particularly for users that post logs to the bug tracker. -- Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24741> Tor Bug Tracker & Wiki <https://trac.torproject.org/> The Tor Project: anonymity online
_______________________________________________ tor-bugs mailing list tor-bugs@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs