Do not log blake3 hash to stdout #136

Closed
opened 4 months ago by duke · 0 comments
duke commented 4 months ago
Owner

This is sensitive metadata and should not be logged to stdout. It can be used to decrypt an encrypted SDL wallet.

A user could redirect stdout to a file and it would be sitting unencrypted on disk or a user could submit their STDOUT in a bug report. It's best to just not log it.

This is sensitive metadata and should not be logged to stdout. It can be used to decrypt an encrypted SDL wallet. A user could redirect stdout to a file and it would be sitting unencrypted on disk or a user could submit their STDOUT in a bug report. It's best to just not log it.
duke added the
bug
label 4 months ago
duke closed this issue 4 months ago
Sign in to join this conversation.
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date

No due date set.

Dependencies

This issue currently doesn't have any dependencies.

Loading…
There is no content yet.