EFF's Logfinder

clonebarkins writes "EFF has just released a new software tool called "logfinder" to help server admins find (and delete) unnecessary log files on their boxen. "By finding unwanted log files, logfinder informs system administrators when their servers are collecting personal data and gives them the opportunity to turn logging off if it isn't gathering information necessary for administering the system.""

Comments

Can't subpeona what doesn't exist?

[PornMaster]

Is the point of this that law enforcement can't subpoena records that don't exist?

Re:Can't subpeona what doesn't exist?

[sporktoast]

If an admin is just using this tool to destroy potentially incriminating logs, then they are using it poorly. Like trying to pound a screw in with a hammer.

The use this has for an admin is to survey (or for the less experienced admin, to discover) what logs the system is currently, so that the admin can decide as a policy which logs should be active or not, and with what level of detail. The itch this tool scratches is that many systems as a default keep more logs than perhaps are necessary. A good admin will shut off whatever is deemed unnecessary, based on multiple criteria (security, system load, user/company privacy).

Forbidding the use of log destruction tools (rm?) is moot. Destroying evidence is illegal. Now, laws (or court orders) mandating a level of logging are a completely different matter.

I appreciate the effort but...

[garcia]

I would seriously hope that:

a) the sysadmins are competent enough to handle this themselves. I would think that a sysadmin would know how to use some sort of local file search.

b) the EFF understands that it's not always up to the sysadmins to determine the amount of time to keep logs that might be used against an individual.

Just as an example...

[PartialInfinity]

This is just EFF's way of reminding sysadmins to be vigilent about their log files, it's not meant to replace good administration habits.

Re:Thanks EFF!

[innerweb]

As is always, that which helps to protect the innocent can be used to protect the *evil*. The problem is the innocent do not know what is being done, and the *evil* are studying and learning to use and abuse. Nothing new there.

InnerWeb