Is it safe to keep demo/debug methods?

[Cj-bc]

Is it safe to keep demo/debug methods?

[THLO]

The point of the leak() function is to show that everything stored in the key-value store is encrypted, so the attacker that triggers it cannot learn much (other than the amount of stored data and an approximate length of the keys and values).
In that sense, the function clear() is more dangerous because everybody can call it (and not just the controller, for example).

Recall that this is just a small prototype that we built as part of the hackathon, so it is definitely not a production-ready piece of software!
You are right that these two functions would not be part of a deployment in production.

[Cj-bc]

I didn't realized how leak() works but now I do...

I'm relieved to hear that this is just a prototype.

Thank you to spend your time on this!
The demo on YouTube was so exciting 😀