News for hackers. Stuff that matters.
Re:Remove this in production by rhinoceraptor on Thursday March 31, 2016 @03:54PM (#11400115)
These are my favorite Github queries:

filename:id_rsa: https://github.com/search?utf8=%E2%9C%93&q=filename%3Aid_rsa

filename:secring.gpg: https://github.com/search?utf8=&q=filename%3Asecring.gpg

extension:.pem BEGIN https://github.com/search?utf8=&q=extension%3A.pem+BEGIN

[ Parent | on HN ]
Re:Remove this in production by dpflan on Thursday March 31, 2016 @03:55PM (#11400123)
A nice, quick security audit.
[ Parent | on HN ]
Re:Remove this in production by nostrademons on Thursday March 31, 2016 @02:57PM (#11399628)
The vast majority of GitHub projects are not in production. I'm surprised there aren't more hits, although it is an awfully specific search query.
[ Parent | on HN ]
Re:Remove this in production by MuEta on Thursday March 31, 2016 @03:03PM (#11399686)
I just got another 4k odd hits with "remove in production" [1]. I think that with enough variation, you can get a lot of hits.

1: https://github.com/search?utf8=%E2%9C%93&q=%22remove+in+prod...

[ Parent | on HN ]
Re:Remove this in production by nabaraz on Thursday March 31, 2016 @03:10PM (#11399741)
Search with quotes looks for exact match. Searching without quotes [1] yields 3 million results.

[1] - https://github.com/search?utf8=%E2%9C%93&q=remove+before+pro...

[ Parent | on HN ]
Re:Remove this in production by ethomson on Thursday March 31, 2016 @04:16PM (#11400274)
My favorite: "In 2038 I will be either too dead or too rich to care about this"

https://github.com/libgit2/libgit2/blob/7adca53ed65380266309...

[ Parent | on HN ]
Re:Remove this in production by jexe on Thursday March 31, 2016 @04:13PM (#11400253)
Some personal favorites:

proprietary and confidential: https://github.com/search?utf8=%E2%9C%93&q=%22proprietary+an...

do not distribute: https://github.com/search?utf8=%E2%9C%93&q=%22do+not+distrib...

[ Parent | on HN ]
Re:Remove this in production by mchahn on Thursday March 31, 2016 @03:54PM (#11400118)
Is anyone else getting tired of these github search posts? It would be nice if they were all in just one post. Actually the comment threads on this post are all that are needed.
[ Parent | on HN ]
Re:Remove this in production by dpflan on Thursday March 31, 2016 @03:57PM (#11400135)
Yup, tried to get a critical mass going here because, well, there are so many phrases that could be posted individually. I think we've proven that interesting phrases exist in code on Github, and now let's let people discover that on their own and free up space for other types of submissions. (https://news.ycombinator.com/item?id=11399790)
[ Parent | on HN ]
Re:Remove this in production by Karunamon on Thursday March 31, 2016 @03:47PM (#11400054)
A great one for finding potential buffer overflow shenanigans:

"Should be big enough" https://github.com/search?utf8=&q=%22should+be+big+enough%22...

[ Parent | on HN ]
Re:Remove this in production by dpflan on Thursday March 31, 2016 @03:04PM (#11399694)
More intriguing, entertaining, and humorous phrases! I'm sure many of have thought, seen, or typed such things (perhaps not committed though).

Let's max out this concept.

1. "Fire me": https://github.com/search?utf8=%E2%9C%93&q=%22Fire+me%22&typ...

2. "This will break": https://github.com/search?utf8=%E2%9C%93&q=%22This+will+brea...

3. "Never do this": https://github.com/search?utf8=%E2%9C%93&q=%22never+do+this%...

4. "This is evil": https://github.com/search?utf8=%E2%9C%93&q=%22this+is+evil%2...

5. "This is insane": https://github.com/search?utf8=%E2%9C%93&q=%22this+is+insane...

6. "Insanity will follow": https://github.com/search?utf8=%E2%9C%93&q=%22insanity+will+...

7. "Why?": https://github.com/search?utf8=%E2%9C%93&q=%22why%3F%22&type...

8. "For the love of god": https://github.com/search?utf8=%E2%9C%93&q=%22for+the+love+o...

9. "If I could do": https://github.com/search?utf8=%E2%9C%93&q=%22if+i+could+do%... (the hopeful ones)

10. "What the hell am I doing?" : https://github.com/search?utf8=%E2%9C%93&q=%22what+the+hell+... (the confused ones)

11. "Why doesn't this work?": https://github.com/search?utf8=%E2%9C%93&q=%22why+doesn%27t+... (more confusion)

12. "Call me": https://github.com/search?utf8=%E2%9C%93&q=%22call+me%22&typ...

13. "Call me maybe": https://github.com/search?utf8=%E2%9C%93&q=%22call+me+maybe%...

14. "Terrible idea": https://github.com/search?utf8=%E2%9C%93&q=%22terrible+idea%...

15. "This code is awful": https://github.com/search?utf8=%E2%9C%93&q=%22this+code+is+a...

[ Parent | on HN ]
Re:Remove this in production by nostrademons on Thursday March 31, 2016 @03:08PM (#11399727)
Two of my favorites from Google code I used to work on (one that I wrote myself, and one that I ended up reviewing) were:

"I am going to hell for this."

"If this is not removed by xx-xx-2008, beat me over the head with a shovel." (Seen and removed in 2010.)

[ Parent | on HN ]
Re:Remove this in production by dpflan on Thursday March 31, 2016 @03:12PM (#11399757)
Heh, those are two rarer phrases:

1. "I am going to hell for this": https://github.com/search?utf8=%E2%9C%93&q=%22i+am+going+to+...

2. "Beat me over the head with a shovel": https://github.com/search?utf8=%E2%9C%93&q=%22beat+me+over+t...

Was an image of a shovel emailed to the committer? :)

[ Parent | on HN ]
Re:Remove this in production by phaed on Thursday March 31, 2016 @03:37PM (#11399951)
"Why does this work?": https://github.com/search?utf8=%E2%9C%93&q=%22why+does+this+...
[ Parent | on HN ]
Re:Remove this in production by shade on Thursday March 31, 2016 @03:19PM (#11399815)
My personal favorite that I've used on occasion: "I am a horrible monster and I pray for death".

https://github.com/search?utf8=%E2%9C%93&q=%22i+am+a+horribl...

[ Parent | on HN ]
Re:Remove this in production by Zikes on Thursday March 31, 2016 @03:10PM (#11399740)
"abandon all hope": https://github.com/search?utf8=%E2%9C%93&q=%22abandon+all+ho...
[ Parent | on HN ]
Re:Remove this in production by auntienomen on Thursday March 31, 2016 @03:27PM (#11399870)
I once encountered the following helpful comment in some (dys)functional code, next to a particularly inscrutable car crash of lambdas:

"Ph'nglui mglw'nafh Cthulhu R'lyeh wgah'nagl fhtagn"

7,463 code results for 'fhtagn'. Probably best not to look.

[ Parent | on HN ]
Re:Remove this in production by rcarmo on Thursday March 31, 2016 @03:49PM (#11400073)
The strangest hit for me was this bit of C#:

            this.IsEvil = isEvil;
            screen.Souls.Add(new Soul(screen, new Vector2(position.X+texture.Width/2-Global.Textures["soul"].Width/2, position.Y), this.IsEvil));
[ Parent | on HN ]
Re:Remove this in production by dpflan on Thursday March 31, 2016 @03:53PM (#11400110)
That indeed looks like some dark magic.
[ Parent | on HN ]
Re:Remove this in production by cthulhujr on Thursday March 31, 2016 @03:39PM (#11399963)
Thar be dragons: https://github.com/search?utf8=%E2%9C%93&q=%22thar+be+dragon...
[ Parent | on HN ]
Re:Remove this in production by szatkus on Thursday March 31, 2016 @03:52PM (#11400097)
"hold my beer"

https://github.com/search?utf8=%E2%9C%93&q=%22hold+my+beer%2...

[ Parent | on HN ]
Re:Remove this in production by ryanmaynard on Thursday March 31, 2016 @09:00PM (#11401825)
Scraped all from the page. http://gitoops.xyz/
[ Parent | on HN ]
Re:Remove this in production by xlm1717 on Thursday March 31, 2016 @03:16PM (#11399790)
You should have milked it for all it's worth and submitted separate posts for all these links!
[ Parent | on HN ]
Re:Remove this in production by dpflan on Thursday March 31, 2016 @03:22PM (#11399832)
"Let's not do that": https://github.com/search?utf8=%E2%9C%93&q=%22Let%27s+not+do... :)

Though it's definitely fun when things like this emerge and people share stories.

[ Parent | on HN ]
Re:Remove this in production by dpflan on Thursday March 31, 2016 @03:40PM (#11399970)
We've got another one: "No idea" https://news.ycombinator.com/item?id=11399852
[ Parent | on HN ]
Re:Remove this in production by mysticllama on Thursday March 31, 2016 @03:54PM (#11400114)
"ugly but works" has many thousands of results!

https://github.com/search?utf8=&q=%22ugly+but+works%22&type=...

[ Parent | on HN ]
Re:Remove this in production by smegel on Thursday March 31, 2016 @04:05PM (#11400198)
A lot of them were ".example" which is OK.

And others said "WILL remove this in production" - i.e. basically a TODO in code which is quite normal for code in development.

Pitchforks down.

[ Parent | on HN ]
Re:Remove this in production by tathougies on Thursday March 31, 2016 @03:13PM (#11399767)
They're mostly demos, as expected. Is anyone surprised?
[ Parent | on HN ]
Re:Remove this in production by dpflan on Thursday March 31, 2016 @03:25PM (#11399857)
Nope. Such comments are interesting to see the shared experiences and thoughts while writing code, and others are for snickering at the irony, especially when it's not a demo.
[ Parent | on HN ]
Re:Remove this in production by rbobby on Thursday March 31, 2016 @03:11PM (#11399751)
I wonder why some of the exact matches are not highlighted in yellow?
[ Parent | on HN ]
Re:Remove this in production by sp332 on Thursday March 31, 2016 @03:36PM (#11399943)
It seems to depend on the highlighting rules for different languages.
[ Parent | on HN ]
Re:Remove this in production by collyw on Thursday March 31, 2016 @04:13PM (#11400257)
Is anyone going to do a search for usernames and passwords?
[ Parent | on HN ]
Re:Remove this in production by zhiqiangf on Thursday March 31, 2016 @09:51PM (#11402015)
careless developers
[ Parent | on HN ]
Re:Remove this in production by rvalue on Thursday March 31, 2016 @02:58PM (#11399648)
This is interesting :)
[ Parent | on HN ]
Re:Remove this in production by kuratowsky on Thursday March 31, 2016 @03:48PM (#11400064)
haha funny :D
[ Parent | on HN ]
Re:Remove this in production by rvdm on Thursday March 31, 2016 @03:31PM (#11399905)
While vastly entertaining ( personal fav is "Call Me Maybe" ) does this create a moral obligation to audit some of these repos that might be in prod and alert the owners of possible security flaws?
[ Parent | on HN ]
Re:Remove this in production by dpflan on Thursday March 31, 2016 @03:47PM (#11400049)
We could check used lyrics for sure...then who owns the code?

Oops I did it again: https://github.com/search?utf8=%E2%9C%93&q=%22oops+i+did+it+...

[ Parent | on HN ]
Re:Remove this in production by artmageddon on Thursday March 31, 2016 @03:45PM (#11400022)
How will you know what's in prod? How do you know what's a security flaw and what isn't?
[ Parent | on HN ]