News for hackers. Stuff that matters.
Re:Keeping secrets out of logs (2024) by shakna on Sunday September 07, 2025 @05:29PM (#45162348)
If you're in a testing environment, where your SIT and UAT are looking to break stuff though, don't you usually want to be able to look to a log of everything?
Re:Keeping secrets out of logs (2024) by tonymet on Sunday September 07, 2025 @06:26PM (#45162747)
I could see a couple reasons against. For one, it's expensive to seralize/encode your objects into the logger , even if you reduce logging level on prod.

Secondly, you can't represent the heap & stack well as strings. Concurrent threads and object trees are better debugged with a debugger (e.g. gdb).