{"action":"created","issue":{"url":"https://api.github.com/repos/i3/i3/issues/1906","labels_url":"https://api.github.com/repos/i3/i3/issues/1906/labels{/name}","comments_url":"https://api.github.com/repos/i3/i3/issues/1906/comments","events_url":"https://api.github.com/repos/i3/i3/issues/1906/events","html_url":"https://github.com/i3/i3/issues/1906","id":105362278,"number":1906,"title":"Log posting instructions are a privacy/security hazard","user":{"login":"Iambithal","id":14178354,"avatar_url":"https://avatars.githubusercontent.com/u/14178354?v=3","gravatar_id":"","url":"https://api.github.com/users/Iambithal","html_url":"https://github.com/Iambithal","followers_url":"https://api.github.com/users/Iambithal/followers","following_url":"https://api.github.com/users/Iambithal/following{/other_user}","gists_url":"https://api.github.com/users/Iambithal/gists{/gist_id}","starred_url":"https://api.github.com/users/Iambithal/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Iambithal/subscriptions","organizations_url":"https://api.github.com/users/Iambithal/orgs","repos_url":"https://api.github.com/users/Iambithal/repos","events_url":"https://api.github.com/users/Iambithal/events{/privacy}","received_events_url":"https://api.github.com/users/Iambithal/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/i3/i3/labels/missing-version","name":"missing-version","color":"ededed"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":6,"created_at":"2015-09-08T11:48:23Z","updated_at":"2015-09-08T12:19:52Z","closed_at":null,"body":"The [Instructions](http://i3wm.org/docs/debugging.html) provided for generating logs to accompany bug reports encourage people to blindly post information about installed software, running applications and sites visited (browser window titles) publicly, and this is a privacy and security hazard. \r\nA log I generated (and redacted before posting) exposed:\r\n\r\n- My username\r\n- My hostname\r\n- Installed software\r\n- Name of project I'm working on (directory name)\r\n- Name of former client I worked on (comments for kb shortcuts in i3 config), under NDA\r\n- applications I'm running\r\n- Web pages I was visiting (browser window titles)\r\n- more.\r\n\r\nThis is seriously bad practice and you should do something about it, such as\r\nhaving your log dumper sanitize the logs before posting them, and making the log links private\r\nprivate by default. Also, a big fat warning on the \"How to debug\" page should be added about the\r\nprivacy risks.\r\n\r\ncc @i3bot , @stapelberg "},"comment":{"url":"https://api.github.com/repos/i3/i3/issues/comments/138538543","html_url":"https://github.com/i3/i3/issues/1906#issuecomment-138538543","issue_url":"https://api.github.com/repos/i3/i3/issues/1906","id":138538543,"user":{"login":"Iambithal","id":14178354,"avatar_url":"https://avatars.githubusercontent.com/u/14178354?v=3","gravatar_id":"","url":"https://api.github.com/users/Iambithal","html_url":"https://github.com/Iambithal","followers_url":"https://api.github.com/users/Iambithal/followers","following_url":"https://api.github.com/users/Iambithal/following{/other_user}","gists_url":"https://api.github.com/users/Iambithal/gists{/gist_id}","starred_url":"https://api.github.com/users/Iambithal/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Iambithal/subscriptions","organizations_url":"https://api.github.com/users/Iambithal/orgs","repos_url":"https://api.github.com/users/Iambithal/repos","events_url":"https://api.github.com/users/Iambithal/events{/privacy}","received_events_url":"https://api.github.com/users/Iambithal/received_events","type":"User","site_admin":false},"created_at":"2015-09-08T12:19:52Z","updated_at":"2015-09-08T12:19:52Z","body":"Really, Are we looking at the same page?\r\n\r\nhttp://i3wm.org/docs/debugging.html\r\n\r\nhas none of this."}}