WordPress base configuration files on GitHub

Re:WordPress base configuration files on GitHub by getdavidhiggins on Monday August 17, 2015 @10:34AM (#10073216)

"Passwords" in the title is a bit misleading. Most of these are staging files with little or no sensitive information there. However there is the odd bit of interesting data there if you look hard enough.

Github search is an untapped resource just like Algolia Search is on Hackernews. Infact I have largely replaced my Google searches with these ones for more refined and curated results.

[ Parent | on HN ]

Re:WordPress base configuration files on GitHub by erikb on Monday August 17, 2015 @10:48AM (#10073330)

What do you mean with staging files, what is not sensitive about username and password of the database?

[ Parent | on HN ]

Re:WordPress base configuration files on GitHub by getdavidhiggins on Monday August 17, 2015 @12:50PM (#10074335)

Well a Wordpress production site is a rare and precious thing to find on Github. There are some that exist, but then even if I do find it:

1.) Password will be changed

2.) Possible honeypot

3.) Boring site is boring. No need to hack it. Not popular enough

Same goes for other databases on there. An enormous amount of cruft to wade through to get anything remotely juicy/interesting. And the same heuristics apply above: is it really so great that I logged into a boring MYSQL database that is probably being monitored and has nothing interesting in there in the first place?

[ Parent | on HN ]

Re:WordPress base configuration files on GitHub by thekevan on Monday August 17, 2015 @12:55PM (#10074370)

I think they mean that a majority of these are instances where someone installed WP to play with it and these are the testing files rather than an actual website they are using. When I installed WP recently, I know I just used a dummy password for testing.

[ Parent | on HN ]