News for hackers. Stuff that matters.

A comment on Terraform should have remained stateless. Parent comment

Re:Terraform should have remained stateless by gtirloni on Saturday May 28, 2022 @08:14AM (#31539713)
Exposed to the world?
[ Parent | on HN ]
Re:Terraform should have remained stateless by NateEag on Saturday May 28, 2022 @11:12AM (#31540918)
I guess that's not ideal, though I'm not clear what attack surface area is increased by storing creation/ deletion metadata in public.

I guess it lets an attacker know that you're using Terraform, which might help them target their attacks.

[ Parent | on HN ]
Re:Terraform should have remained stateless by bpicolo on Saturday May 28, 2022 @11:25AM (#31541010)
Terraform stores secrets in state. Generated database password, etc.
[ Parent | on HN ]
Re:Terraform should have remained stateless by NateEag on Saturday May 28, 2022 @03:03PM (#31542783)
Oh, gotcha. I've not used Terraform yet.

Yes, if that's the case, then TXT records could easily be unsuitable. Depends exactly what metadata needs to be attached to your DNS records.

[ Parent | on HN ]