20GB leak of Intel data: whole Git repositories, dev tools, backdoor mentions

Re:20GB leak of Intel data: whole Git repositories, dev tool... by meshaneian on Thursday August 06, 2020 @09:20PM (#24077057)

Next up: Replace MD5 with BASE64+ROT13. Significantly worse functionality AND performance, but sounds more secure (to a layman) and doesn't trigger the "MD5" alert...

[ Parent | on HN ]

Re:20GB leak of Intel data: whole Git repositories, dev tool... by cortesoft on Thursday August 06, 2020 @09:35PM (#24077142)

You joke, but an ex-security guy at my company literally told me “this file can’t be in plain text on disk. Base64 encode it”

[ Parent | on HN ]

Re:20GB leak of Intel data: whole Git repositories, dev tool... by skissane on Thursday August 06, 2020 @09:51PM (#24077239)

Base64 encoding does protect somewhat against "looking over your shoulder" attacks

(Unless the person looking over your shoulder has a really good memory and can remember the Base64, or decode it in their head. Or they have a camera.)

[ Parent | on HN ]

Re:20GB leak of Intel data: whole Git repositories, dev tool... by mschuster91 on Friday August 07, 2020 @05:44AM (#24080152)

Helps against attackers grepping the whole disk (or any folder named "conf" or similar) for "username", "user", "password", "pass", "key" and friends.

It's game over anyway if someone has a shell on your server but at least it complicates their life a bit.

[ Parent | on HN ]