News for hackers. Stuff that matters.

A comment on GitHub commit search: “remove password”. Parent comment

Re:GitHub commit search: “remove password” by aaron695 on Wednesday February 15, 2017 @06:59AM (#13651378)
Key is easy. The high entropy should tip you off.

Passwords, look for variables with the name password, passwd assigned strings.

Like Gmails attachment, it'll get stuff wrong, just make it easy to continue on.

[ Parent | on HN ]
Re:GitHub commit search: “remove password” by tuxxy on Wednesday February 15, 2017 @09:52AM (#13652352)
This. However, it would only work with secure passwords. Setting the entropy count too low would result in a bunch of false positives.
[ Parent | on HN ]