News for hackers. Stuff that matters.

A comment on What will happen when you commit secrets to a public Git repo?. Parent comment

Re:What will happen when you commit secrets to a public Git ... by remram on Saturday November 07, 2020 @11:27AM (#25015984)
You need to guess both to use them, but you only need to guess the secret to get it revoked. GitHub does not check that the corresponding access key is somewhere in the repo too before taking action. You are right about this being impractical though.
[ Parent | on HN ]
Re:What will happen when you commit secrets to a public Git ... by time0ut on Saturday November 07, 2020 @11:58AM (#25016257)
Ah ok. I wasn't sure how that part worked.
[ Parent | on HN ]