Ask HN: How do you prevent sensitive data from leaking through debugging tools?

1 points by Securelytixdev ↗ HN

2 comments

[ 0.23 ms ] story [ 10.3 ms ] thread
1: Don't keep it in memory. If you have to, keep it in memory for as short as time as possible and scrub it afterwards. For example, password fields.

2: If you generate crash dumps, scrub the dumps when you generate them. Some crash reporting services offer to do this automatically.

3: If you are writing anything client/server, where you control the server and the client runs on a users machine, never trust the client. Expect that it has been hacked, is being debugged, and is actively hostile.