Re:Should a security library log sensitive information?
by firstupvote on Monday January 26, 2015 @12:53PM
(#8948402)
The attack is changing the debug level logging...
[ Parent
| on HN ]
Re:Should a security library log sensitive information?
by Someone1234 on Monday January 26, 2015 @01:09PM
(#8948491)
Right..? But if you can change the log level you can likely do a lot of other things too, like access the private key used by Santuario.