News for hackers. Stuff that matters.

A comment on Atlassian and Envoy briefly blame each other for data breach.

Re:Atlassian and Envoy briefly blame each other for data breach by kushalbohra on Friday February 17, 2023 @12:57PM (#34837993)
"Employee posted his credentials into public repository", wondering what reason would have provoked him to do that in first place?
[ Parent | on HN ]
Re:Atlassian and Envoy briefly blame each other for data breach by MikeKusold on Friday February 17, 2023 @01:08PM (#34838153)
It’s part of the danger of having a public “dotfiles” repository. It’s very easy to check in your .zshrc, only to discover that some script added an ENV var that contains a secret. Alternatively, the employee could have checked in a script that contained some secrets.
[ Parent | on HN ]
Re:Atlassian and Envoy briefly blame each other for data breach by pojzon on Friday February 17, 2023 @03:22PM (#34840014)
Thats why you use precommit hooks with secrets scan.

Maltitude of those.

[ Parent | on HN ]
Re:Atlassian and Envoy briefly blame each other for data breach by v3ss0n on Friday February 17, 2023 @01:08PM (#34838145)
Because Jira is so bad
[ Parent | on HN ]