News for hackers. Stuff that matters.
Re:Good Logging by wsargent on Saturday July 25, 2020 @01:37PM (#23950971)
Ideally the data should be filtered before it gets to logging in the first place, but if not, you can add another layer of defense by employing censors:

https://tersesystems.github.io/terse-logback/guide/censor/

Or you can use logstash-logback-encoder, which has masking:

https://github.com/logstash/logstash-logback-encoder#masking

Re:Good Logging by wsargent on Sunday July 26, 2020 @01:20PM (#23958527)
There's also Witchcraft Logging, which has the concept of "safe" parameters and is available in Go, Rust, and Clojure:

https://docs.rs/witchcraft-log/0.3.0/witchcraft_log/