You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I would like to clarify how much case (in)sensitivity is desired with sos clean.
Most of the cleaner works case insensitive, meaning that e.g. foouser being obfuscated to obfuscateduser0, all FOOUSER strings are obfuscated to obfuscateduser0 as well. Or that foo.bar.example.com and FOO.bar.EXAMPLE.com are both matched the same way and obfuscated to the samehost123.obfuscateddomain2.com - altogether in their appropriate case sensitivity. Meaning that /etc/sos/cleaner/default_mapping has:
This is achieved by re.I in any re.search/re.findall/re.match, while keeping mapping.dataset case sensitive.
I guess both are considered as features:
case insensitive match
case sensitive obfuscation of hostnames/domainnames
The reason why I ask: this means the mapping.dataset keeps duplicate keys (up to case sensitivity), which makes the dict "redundantly bigger". Relaxing from the "case sensitive obfuscation" feature, we can gain some performance improvement in handling smaller mapping.dataset.
But I think it is not worth changing. The performance gain would be small, ut we would loose some possibly valuable feature.
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
I would like to clarify how much case (in)sensitivity is desired with
sos clean.Most of the cleaner works case insensitive, meaning that e.g.
foouserbeing obfuscated toobfuscateduser0, allFOOUSERstrings are obfuscated toobfuscateduser0as well. Or thatfoo.bar.example.comandFOO.bar.EXAMPLE.comare both matched the same way and obfuscated to the samehost123.obfuscateddomain2.com- altogether in their appropriate case sensitivity. Meaning that/etc/sos/cleaner/default_mappinghas:This is achieved by
re.Iin anyre.search/re.findall/re.match, while keepingmapping.datasetcase sensitive.I guess both are considered as features:
The reason why I ask: this means the
mapping.datasetkeeps duplicate keys (up to case sensitivity), which makes the dict "redundantly bigger". Relaxing from the "case sensitive obfuscation" feature, we can gain some performance improvement in handling smallermapping.dataset.But I think it is not worth changing. The performance gain would be small, ut we would loose some possibly valuable feature.
What are your thoughts?
All reactions