Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

- arbitrary user, session and request IDs

- this can be done and then discard the address

- how so? What does knowing the address months later help? Something like fail2ban and other automated systems, sure, but long term logging?



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: