News for hackers. Stuff that matters.
Re:Facebook Expects to Be Fined Up to $5B by FTC Over Privac... by UncleMeat on Tuesday April 30, 2019 @06:55PM (#19792829)
Change1: Enable logging of middleware traffic on 0.01% of requests for better profiling.

Reviewer: Does this have privacy implications?

Change1: No, Service X marks all PII before this point. Code X drops everything marked in this way.

Two years later.

Change N: Modify request structure for more optimal blah blah blah.

Now suddenly the changed request structure causes a regression in the PII detection which causes some logging of PII.

This shit is way more complex than "just stop people when they ask to log passwords".

There are no comments on this comment yet.