Dont use Reddit username or Facebook username or anything like that even if it could be cool. That way you dont have to worry even if some log file or error stack trace recorded your username.

all 26 comments

sorted by: hot top controversial new old
[–] 38 points 2 years ago* (2 children)

And don't forget to always use password as your password! 🤡

  • source
  • hideshow 4 child comments
  • [–] [S] 4 points 2 years ago* (2 children)
  • [–] 5 points 2 years ago (2 children)
  • [–] 35 points 2 years ago (2 children)

    Drive your web dev nuts and use [object Object] as user name

  • source
  • hideshow 4 child comments
  • [–] 3 points 2 years ago (3 children)

    OK, I guess it's some sort of sql injection, but what does that actually does?

  • source
  • parent
  • hideshow 6 child comments
  • [–] 5 points 2 years ago (1 child)

    Not really - a SQL Injektion would be naming my user user"; DROP TABLE USERS;-- or something like that.

    My string is harmless but might scare web devs: How often do you see pseudocode like this?

    log(INFO, "User "+user.userID+" logged on")
    

    Usually this should print User @someone@example.com logged on as the variable content gets converted to a string. But if the variable is not a simple datatype like string, but a complex one, there might be errors. If you do the concatenation above with an object instead of a string, this would only print User [object Object] logged on. Now when the web dev sees this line he's going to try to find the Bug, where this variable gets set to the wrong value/type, when in reality it's just your carefully crafted user name.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 2 years ago*

    Its the String representation of a Object.

    If you open your Browser and hit F12, go to the console and type console.log(""+{}) you get an Object {} converted to a string by joining it with another empty string.

  • source
  • parent
  • [–] 16 points 2 years ago (1 child)

    Why would I be worried about my username showing up in logs and errors?

  • source
  • hideshow 2 child comments
  • [–] [S] 1 point 2 years ago (2 children)

    Sometimes you may not want to be identified.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 10 points 2 years ago (1 child)

    Ok but your PC username is way more private than your lemmy username, also its not your real name so what's the problem?

  • source
  • parent
  • hideshow 2 child comments
  • [+] 1 point 2 years ago (1 child)
  • [–] 14 points 2 years ago

    Don't use "user" as your username. Use a personalized one, because it is much easier to identify and obviously it is a requirement in a multi user context.

    If you share your logs pseudonymize them, but pick anything other than "user", because it makes it confusing especially when dealing with pam, ssh etc.

    Overall not great advise.

  • source
  • [–] 9 points 2 years ago (1 child)

    Uh, but if you were to post a logfile or whatever online you'd anyways sanitize it before posting, right?

  • source
  • hideshow 2 child comments
  • [–] 4 points 2 years ago

    I don't think this is as much of an issue as people think it is, unless you're going to be sharing your logs with others it's not really going to be much of an issue, especially if it's not your real name. You might be thinking of some app or malicious program looking through them, instead you should be thinking of the real danger of an app or program opening and looking through Personal files on your computer, that's where the real juicy stuff is.

  • source
  • [–] 4 points 2 years ago