[reSIProcate] More problems with `assert'
Daniel Pocock
daniel at readytechnology.co.uk
Mon Nov 6 18:08:32 CST 2006
>
>
> In my opinion, you should not be putting log messages in production
> systems
> that log programmer errors. This leads to a potential attack on the
> system.
>
I would agree that is often true - however, not all production systems
are connected to the public Internet, and sometimes the company
developing the system is only deploying it within a small number of
client sites where they are monitoring very closely, for instance,
during a beta testing period.
However, if no one else feels that this functionality is legitimate,
then I'm quite happy to let it rest.
More information about the resiprocate-devel
mailing list