Skip to content

Scrub addresses before logging them

Torsten Grote requested to merge 592-scrub-addresses-before-logging-them into master

MAC, IP and onion addresses are now scrubbed before logging to ensure we don't leave any sensitive information in plaintext on the device or send it in crash reports or feedback.

  • Bluetooth MAC addresses keep the first and last octets
  • IPv4 addresses keep the first and last octets
  • IPv6 addresses should be scrubbed completely (couldn't test)
  • Onion addresses keep the first three characters

If an address is invalid it will not be scrubbed to enable debugging, because it is most likely not sensitive.

Closes #592 (closed)

Merge request reports