News for hackers. Stuff that matters.

A comment on Show HN: Infisical – open-source secret management platform.

Re:Show HN: Infisical – open-source secret management platform by iLoveOncall on Wednesday July 19, 2023 @05:24PM (#36793638)
And still no tests in your codebase.

This is absolutely ridiculous when it has been brought up in every past Show HN that you've done.

I really really hope nobody is reckless enough to use a completely untested platform to manage secrets.

[ Parent | on HN ]
Re:Show HN: Infisical – open-source secret management platform by mousetree on Wednesday July 19, 2023 @05:52PM (#36793997)
There are tests: https://github.com/Infisical/infisical/blob/main/backend/tes...

/s

[ Parent | on HN ]
Re:Show HN: Infisical – open-source secret management platform by yjftsjthsd-h on Wednesday July 19, 2023 @08:24PM (#36795420)
... What did I just read? (But seriously, why would you ever have a file of what looks like at least some sort of tests but literally every line commented out?)
[ Parent | on HN ]
Re:Show HN: Infisical – open-source secret management platform by NobleLie on Wednesday July 19, 2023 @08:50PM (#36795610)
Because they theoretically worked at some point but now they do not.
[ Parent | on HN ]
Re:Show HN: Infisical – open-source secret management platform by iLoveOncall on Thursday July 20, 2023 @03:01AM (#36797617)
You are obviously right but the question is still valid. They are using git and a deleted file is a one command away, so why keep the file but fully commented?

IMO this highlights further bad engineering culture.

[ Parent | on HN ]
Re:Show HN: Infisical – open-source secret management platform by rmbyrro on Wednesday July 19, 2023 @09:54PM (#36796006)
I was wondering whether this project is safe to trust my secrets. Thanks for saving me time.

Besides, a challenge with secrets is hardware. Storing them on ordinary EC2 instances or else is insecure. That's why AWS Secrets, for example, use specialized hardware that are hardened for this use case.

[ Parent | on HN ]
Re:Show HN: Infisical – open-source secret management platform by SilentNuke on Wednesday July 19, 2023 @10:41PM (#36796338)
> That's why AWS Secrets, for example, use specialized hardware that are hardened for this use case.

I'm curious what your source is for this claim. I presume when you say AWS Secrets that you're referring to AWS Secrets Manager?

[ Parent | on HN ]