Lee Holmes 1d ago

Interesting collision of security and security:

Security: "All logs should be immutable."
Security: "I just found credentials leaking into logs."

Show threadRob Carlson
@Lee_Holmes this just implies that credentials are also immutable when they should be disposable
Mar 25 at 7:48pmWeb
Show threadLee Holmes 1d ago
@vees Yeah, you can usually rotate your way out of a credential spill. The problem gets nastier when you think about other oopsie moments like PII, SSNs etc.