4

When a user posts/edits a question, and unknowingly posts sensitive information like username/password to a database. How should this be handled?

I came across one, but now it's in the revision history. Can/should a moderator handle this? I've flagged with moderator's attention, or is there a better way?

6
  • 2
    It's always in the revision history. Even if there were a way to remove it, the user should immediately change the password and what not. Others may have copied it before it was removed from the post. I've even noticed Google pick up on these things within seconds of the post.
    – Brad
    Apr 29, 2014 at 0:35
  • Meta SE post: meta.stackexchange.com/questions/132117/… Apr 29, 2014 at 0:36
  • Aha thanks, I was searching on the wrong meta. :) Apr 29, 2014 at 0:38
  • 2
    I have run into this a few times. My initial panic subsides when I realize that ultimately if someone in the 21st century is boneheaded enough to post their credentials online, it’s just not my problem. I have edited sensitive data out of posts. And I have told posters to change their credentials. But past that? Not my problem. Apr 29, 2014 at 0:53
  • The last time I noticed something that looked like sensitive info (an API key), I mentioned it in a comment and the OP said that it was for a test account he created specifically so we could try it, not the production key.
    – Barmar
    Apr 29, 2014 at 20:56
  • I have done this, but the username/password is always for a debug server that can’t be reached from the internet, so it is often not the problem it looks like at first sight. May 6, 2014 at 12:50

0

Browse other questions tagged .