GitHub sued for aiding hacking in Capital One breach

Re:GitHub sued for aiding hacking in Capital One breach by ben509 on Sunday August 04, 2019 @12:26PM (#20607455)

Any automated detection scheme can be thwarted by encryption as trivial as ROT13.

You could leave a comment in README: "To decrypt, just run 'l33t-xor-crypt --key bob --file hacked-data.txt'" and Github's scanner is none the wiser.

Meanwhile, it will be finding all the false positives already mentioned, especially test suites with fake data.

[ Parent | on HN ]

Re:GitHub sued for aiding hacking in Capital One breach by giancarlostoro on Sunday August 04, 2019 @12:42PM (#20607595)

Hell in Python its:

>>> import codecs

>>> codecs.encode('foobar', 'rot_13')

'sbbone'

[ Parent | on HN ]