[pavel_lishin]

Who was replacing numbers with asterisks, and for what purpose?

[pilif]

That was a "privacy" mode of some personal firewall that was protecting the user's phone number from leaking out.

Incidentally, this has leaked the users phone number because only that specific numer was being replaced with asterisks.

Welcome to the world of very crappy "security" (-theater) end-user products.

[goleksiak]

The asterisks hide this request's BasicAuth credentials between the cellular printer and our app servers...we don't transmit customer phone numbers between the printer and our app servers. Twilio transmits them to our app servers but that is HTTPS

[pilif]

I think pavel_lishin was referring to a side-note in my war-store I listed as the parent comment.

[pavel_lishin]

Yup.

[goleksiak]

ah - my bad

[goleksiak]

I didn't want to hang our BasicAuth creds out to dry

[lclarkmichalek]

You were sending them over http, so aren't they already kinda fucked?

[goleksiak]

y, true

[pavel_lishin]

Oh, I was asking pilif to comment about their experience.