Rust

6784 readers

8 users here now

Welcome to the Rust community! This is a place to discuss about the Rust programming language.

Wormhole

[email protected]

Credits

The icon is a modified version of the official rust logo (changing the colors to a gradient and black background)

founded 2 years ago

MODERATORS

[email protected]

crates.io security incident: improperly stored session cookies (blog.rust-lang.org)

submitted 2 days ago by [email protected] to c/[email protected]

4 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 13 points 2 days ago (1 children)

Would using rust have prevented this issue?

[–] [email protected] 5 points 2 days ago (1 children)

Lol but no essentially somebody accidentally logged the ID for an actively logged in user (not the user ID) when an error happens. Surprising they even released a thing about this

[–] [email protected] 1 points 1 day ago (1 children)

Yeah, I wonder why any developer thought logging either the session cookie itself was a good idea. I guess they could decode it and figure out which user was having an issue? Still bizzare

[–] [email protected] 1 points 1 hour ago

Probably some automatic serialization that included the field. Someone forgot a #[serde(skip)]!