Re:OpenBSD Recent Security Innovations
by throwaway2048 on Wednesday June 05, 2019 @11:16PM
(#20111266)
Why even bother with core files if you aren't a developer? they are completely useless for an average user and are really nothing but a risk.
[ Parent
| on HN ]
I feel like this kind of culture may be dying in most places. But it used to be a common thing that you could pass a core file around to someone knowledgeable who knew what to do with it. In a workplace or university, maybe someone on staff who is technical. In a piece of software, either open source or commercial, maybe its developer. Obviously there is trust implicit in that, because core files contain your data.
On Windows, their equivalent of core files gets sent to Microsoft and they run analysis on them to get most common stack traces for crashing bugs. If you're opted in.
Why doesn't the system automatically pass core files to someone who knows how to deal with them. I work on an embedded system and our system to get core files back from the users has meant a lot of crashes go from "no idea what happened, closed" to "found the bug and fixed it".
Of course there are security implications. Developers are not allowed to see core files from real customers unless the customer agrees. However our test department and our beta tests agree to this. I don't think anyone has ever looked into a core file to see sensitive data not related to the crash but the possibility exists.
Re:OpenBSD Recent Security Innovations
by SmellyGeekBoy on Thursday June 06, 2019 @05:39AM
(#20112944)
To be fair, I'm not sure OpenBSD is targeted at the "average user".