News for hackers. Stuff that matters.

A comment on SolarWinds leaked FTP credentials through a public GitHub repo since 2018. Parent comment

Re:SolarWinds leaked FTP credentials through a public GitHub... by comprev on Wednesday December 16, 2020 @10:07AM (#25443399)
Look into ".gitignore", also consider manually adding the files you've worked on and wish to commit.
[ Parent | on HN ]
Re:SolarWinds leaked FTP credentials through a public GitHub... by qz2 on Wednesday December 16, 2020 @10:12AM (#25443462)
Yes people think I’m insane when I manually add files to a commit. -a is another foot gun.
[ Parent | on HN ]
Re:SolarWinds leaked FTP credentials through a public GitHub... by ChrisMarshallNY on Wednesday December 16, 2020 @10:12AM (#25443470)
That's sort of what I wrote.

I just make sure to have a single location for sensitive stuff, then ignore/move it.

I will store the contents of the file as an encrypted note in 1Password, so I do have a stored version controlled variant.

[ Parent | on HN ]