PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Fixing Debug Log Leakage with Safe Coding

bughunters.google.com | blog | #secure-coding | #data-leakage | #google | #logging | #api-design | #sensitive-data
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Google explains how unaware logging of complex data structures can leak secrets such as cryptographic keys, and how safe-by-default APIs prevent debug log leakage by design.
Published
Collected

Related coverage

blog · hackerone.com
The Top 5 Most Common Security Issues I Discover When Reviewing Code
A veteran code reviewer counts down the five security issues he finds most often, starting with PII and secrets leaking into logs and poor cryptography choices, with Python and Ruby examples.
blog · bughunters.google.com
ESCAL8 2026: Agentic Hacking in the Lion City
Check out this post to learn more about ESCAL8 2026, Google’s annual flagship security conference, coming to Singapore from October 23–25, 2026!
blog · bughunters.google.com
Breaking into Google's GFile for $100k
This post details an attack on Google’s internal APIs, bypassing authorization to exploit the GFile library to gain access to internal filesystems and storage.
blog · bughunters.google.com
Scaling Memory Safety: AI-Assisted Rewrites of C/C++ Dependencies to Rust
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · bughunters.google.com
More Cryptanalysis Makes Us All Safer
This post analyzes results published by Anthropic and argues that these recent advances do not signal the downfall of cryptography.
blog · portswigger.net
[MoBP] Search me
Burp adds suite-wide search across request headers, response bodies and other locations, with a preview pane. The author used it to find credit card numbers leaking in HTML despite on-screen masking.
Back