Re:Convert a Bird Scooter to a personal one with $32 kit
by cabaalis on Tuesday December 04, 2018 @07:39PM
(#18604827)
Would be cool if it didn't leak half the authentication setup. Seems like the error handler could scan the text for configured values and mask before echoing it out.
[ Parent
| on HN ]
Re:Convert a Bird Scooter to a personal one with $32 kit
by dannypgh on Tuesday December 04, 2018 @07:46PM
(#18604852)
Better yet, the error handler could not print anything back. A generic 500 is the way to go. Log your errors.
If you think you'd get worthwhile bug reports / don't want to implement log analysis or whatever, take whatever errors, stack traces, etc. you'd like, encrypt and base64 encode them, and print that.
Printing any hints about the nature of errors should be regarded as a security risk.
Re:Convert a Bird Scooter to a personal one with $32 kit
by cabaalis on Tuesday December 04, 2018 @07:49PM
(#18604863)
Absolutely true, and how I implement error handling personally (meaning give a friendly non technical message and track the error internally) I blame a brain collapse after a long day :)