Re:Post Mortem: A single whitespace character
by goleksiak on Monday October 27, 2014 @11:37AM
(#8516105)
The asterisks hide this request's BasicAuth credentials between the cellular printer and our app servers...we don't transmit customer phone numbers between the printer and our app servers. Twilio transmits them to our app servers but that is HTTPS
Re:Post Mortem: A single whitespace character
by pilif on Monday October 27, 2014 @11:43AM
(#8516161)
I think pavel_lishin was referring to a side-note in my war-store I listed as the parent comment.
Re:Post Mortem: A single whitespace character
by pavel_lishin on Monday October 27, 2014 @11:55AM
(#8516245)
Yup.
Incidentally, this has leaked the users phone number because only that specific numer was being replaced with asterisks.
Welcome to the world of very crappy "security" (-theater) end-user products.