News for hackers. Stuff that matters.

A comment on Post Mortem: A single whitespace character. Parent comment

Re:Post Mortem: A single whitespace character by pavel_lishin on Monday October 27, 2014 @10:54AM (#8515788)
Who was replacing numbers with asterisks, and for what purpose?
[ Parent | on HN ]
Re:Post Mortem: A single whitespace character by pilif on Monday October 27, 2014 @11:22AM (#8515996)
That was a "privacy" mode of some personal firewall that was protecting the user's phone number from leaking out.

Incidentally, this has leaked the users phone number because only that specific numer was being replaced with asterisks.

Welcome to the world of very crappy "security" (-theater) end-user products.

[ Parent | on HN ]
Re:Post Mortem: A single whitespace character by goleksiak on Monday October 27, 2014 @11:37AM (#8516105)
The asterisks hide this request's BasicAuth credentials between the cellular printer and our app servers...we don't transmit customer phone numbers between the printer and our app servers. Twilio transmits them to our app servers but that is HTTPS
[ Parent | on HN ]
Re:Post Mortem: A single whitespace character by pilif on Monday October 27, 2014 @11:43AM (#8516161)
I think pavel_lishin was referring to a side-note in my war-store I listed as the parent comment.
[ Parent | on HN ]
Re:Post Mortem: A single whitespace character by pavel_lishin on Monday October 27, 2014 @11:55AM (#8516245)
Yup.
[ Parent | on HN ]
Re:Post Mortem: A single whitespace character by goleksiak on Monday October 27, 2014 @12:14PM (#8516372)
ah - my bad
[ Parent | on HN ]
Re:Post Mortem: A single whitespace character by goleksiak on Monday October 27, 2014 @10:56AM (#8515810)
I didn't want to hang our BasicAuth creds out to dry
[ Parent | on HN ]
Re:Post Mortem: A single whitespace character by lclarkmichalek on Monday October 27, 2014 @11:38AM (#8516122)
You were sending them over http, so aren't they already kinda fucked?
[ Parent | on HN ]
Re:Post Mortem: A single whitespace character by goleksiak on Monday October 27, 2014 @12:00PM (#8516281)
y, true
[ Parent | on HN ]
Re:Post Mortem: A single whitespace character by pavel_lishin on Monday October 27, 2014 @11:55AM (#8516251)
Oh, I was asking pilif to comment about their experience.
[ Parent | on HN ]