News for hackers. Stuff that matters.

A comment on 8tracks Password Security Alert. Parent comment

Re:8tracks Password Security Alert by user5994461 on Sunday July 16, 2017 @08:01AM (#14781634)
I have never seen a company that didn't store some credentials in their VCS.
[ Parent | on HN ]
Re:8tracks Password Security Alert by oneweekwonder on Sunday July 16, 2017 @09:34AM (#14781913)
To the point where you see weekly TIFU /r/cscareerquestions post on a junior using training material and then accidentally trashing the production db.
[ Parent | on HN ]
Re:8tracks Password Security Alert by staofbur on Sunday July 16, 2017 @05:46PM (#14784269)
That doesn't happen because you don't let them have the credential vault keys. In fact no humans get them; just the build and deployment pipeline.
[ Parent | on HN ]