an error occurred check log android studio

A person who wants to make a big mess on our server already have an access to all the needed information, so it will be quite easy to, for example, drop the database, get all user data, etc. Let’s consider another example - we left logs with some very sensitive data (like Authorization Token, user login, user password). He knows that some token is needed, and after the authorization process, we are getting user information. Before checking the logs, a potential attacker knows nothing about how our authorization process looks like, but what about now? He knows exactly the authorization workflow.

Why? Because all those information can be really helpful for the person who wants to have an unauthorized access to our app.

Is it secure to keep such logs in the production app? NO. Probably most of them contain some not important information (from your perspective), for example: “Signing in”, “Getting Token”, “Signing in successful”, “Getting user data”. What type of logs do we log in our applications? Logs are very helpful during the development process, but should we leave them in a production app? Exposing information about the appĮvery information that we log can be a potential source of security issues! We use it to display useful information, errors, workflows or even to debug something. Log entries are very important in a developer’s life.

An error occurred check log android studio