News for hackers. Stuff that matters.
Re:Toyota Accidently Exposed a Secret Key Publicly on GitHub... by throwaway290 on Friday October 14, 2022 @09:33AM (#33203306)
I see this standard linked here a lot. Did anyone read it though? It only helps with identifying whether a string is a secret, not at all the service or environment where the secret applies.
Re:Toyota Accidently Exposed a Secret Key Publicly on GitHub... by miohtama on Friday October 14, 2022 @05:39PM (#33209119)
If any value does not natively support secret token sceme, you can apply secret-token: prefix and then strip it during the usage.