Re:Repositories held for ransom by using valid credentials
by mkagenius on Saturday May 04, 2019 @12:28PM
(#19827430)
You are just hacking the leaves. Once the secret is posted. It is public, it has multiple copy elsewhere on the internet. Even if you delete there is a copy kept somewhere on the internet -- and that's not an assumption. For example, iirc, Github copy is dumped to google every some-x-time.
[ Parent
| on HN ]
Re:Repositories held for ransom by using valid credentials
by justinclift on Saturday May 04, 2019 @08:46PM
(#19830375)
Hmmm, it seems like having layered security, where accidentally exposed credentials aren't automatically "game over" would be better than not.
Not sure how practical that is to implement for every technology, but for many it could probably be done.
Seems like a time+money vs risk trade off thing.