search

KomodoPlatform / dPoW

Komodo delayed Proof of Work software
38 stars 73 forks source link

[opsec] privkeys in log #24

Open ca333 opened 4 years ago

ca333 commented 4 years ago

SuperNET_login() invocation prints the privkeys as reported by @phm87 - https://github.com/KomodoPlatform/dPoW/pull/23

phm87 commented 4 years ago

As discussed, I was wrong, privkeys are not printed in logs by SuperNET_login() In mm2 logs, privkeys appear but I don't know which call prints that. I though that iguana do the same Thank you for the discussion on discord to clarify

Can you close this Issue ? We'll perform grep on our logs to be sure that no sensitive info is present.

imylomylo commented 4 years ago

The encryptwallet RPC is the one that returns privkeys. If the operator is logging stdout to a file, this will remain in logs. In old docs (early season2), encryptwallet was described to be called in the wp_7776 file.

Since mid-S2, the docs were updated with walletpassphrase RPC call.