News for hackers. Stuff that matters.

A comment on Uber Paid Hackers to Delete Stolen Data on 57M People. Parent comment

Re:Uber Paid Hackers to Delete Stolen Data on 57M People by davidumoh on Wednesday November 22, 2017 @03:44AM (#15755320)
Really surprising to see that sensitive credentials were checked in to VCS. Apart from peer code review, how can a company avoid developers checking in sensitive data to VCS?
[ Parent | on HN ]
Re:Uber Paid Hackers to Delete Stolen Data on 57M People by rplnt on Wednesday November 22, 2017 @04:05AM (#15755418)
You could have a git hook (even remote) that would check for pre-configured patterns and reject the push if it contains them.

Quick google yielded this https://github.com/awslabs/git-secrets

[ Parent | on HN ]
Re:Uber Paid Hackers to Delete Stolen Data on 57M People by selvakn on Wednesday November 22, 2017 @04:19AM (#15755476)
Plug: https://github.com/thoughtworks/talisman
[ Parent | on HN ]