News for hackers. Stuff that matters.

A comment on Best practices for managing and storing secrets like API keys and credentials.

Re:Best practices for managing and storing secrets like API ... by lazyant on Friday June 12, 2020 @07:57PM (#23505218)
> Use local environment variables, when feasible

Hmm no, environments vars are very convenient but leak like crazy easily.

[ Parent | on HN ]
Re:Best practices for managing and storing secrets like API ... by LyndsySimon on Saturday June 13, 2020 @02:27AM (#23507301)
Citation, please.

No situation readily come to mind where an attacker could gain access to env vars but would not also have access to any other means of persistence.

[ Parent | on HN ]