[tor-bugs] #24741 [Core Tor/Tor]: Consider redacting usernames in notice level logs
Tor Bug Tracker & Wiki
blackhole at torproject.org
Mon Dec 25 06:26:02 UTC 2017
#24741: Consider redacting usernames in notice level logs
------------------------------+--------------------------------
Reporter: teor | Owner: (none)
Type: defect | Status: new
Priority: Medium | Milestone: Tor: 0.3.4.x-final
Component: Core Tor/Tor | Version:
Severity: Normal | Keywords:
Actual Points: | Parent ID:
Points: 1 | Reviewer:
Sponsor: |
------------------------------+--------------------------------
macOS uses a person's first and last name as their username by default.
(I'm not sure what Windows or other unix systems do.)
This means that logs can contain a user's full name, and sometimes (at
info level?) their IP address.
We should think about the risks here, particularly for users that post
logs to the bug tracker.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24741>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list