Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

That's not the case or the issue for the vast majority of developers


Not everyone has to work with PII but the general rule to not log your data to generic log or stack traces still applies to everyone. On top of that tools like languages or frameworks don't know what the data they're working with does so they default to the secure option of not writing data out on errors. If you know the data isn't and it's a common spot for errors you can have the data logged by tossing a try catch statement around the pain point in your code.


If you write an application that makes money in a manner that involves transactions from people somehow, it will be the case for you. That is in fact the majority of developers.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: