[Adium-devl] Smart Crash Reports

[Evan Schoenberg]

Julian,

On May 2, 2007, at 4:13 PM, Julian Bennett Holmes wrote:

> If these are supposed to be private, they're not. I tried logging in
> with the key and crashes@ the usual, which I guessed to be
> adiumx.com, and got right in.
>
> I'm not sure if it's supposed to be private or not, but I thought I'd
> just let everybody know that anyone who's subscribed to this list can
> view the crash reports.

Thanks for letting us know, in case it was a problem.  They are not  
intended to be private, though.  The old crash reporter recorded IP  
addresses and email addresses and therefore was a tightly guarded  
repository of private information.   Smart Crash Reports contains no  
individually indentifiable data; I consider this to be a feature, as  
it makes crashes -- and therefore finding fixes --  more open and  
accessible.  Optimally, we would collect private data but only  
display it for authorized logged in users of a hypothetical new crash  
reporter... that way, when bill at msn.com says, "Adium crashes!!!111"  
we can look up his particular crash report with ease, but we can  
still open the archives up to any interested parties.

The only potential security problem I see is that if there were some  
sort of DOS possible, someone might discover it through analysis of  
crash logs while it might otherwise remain hidden... but since there  
are more good people than bad (so I claim and stand by), I think this  
simply increases the chances that someone would find and fix it.

-Evan

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://adium.im/pipermail/devel_adium.im/attachments/20070502/696d072d/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 186 bytes
Desc: This is a digitally signed message part
URL: <http://adium.im/pipermail/devel_adium.im/attachments/20070502/696d072d/attachment.sig>