News for hackers. Stuff that matters.

A comment on Visualizing the locations of malicious login attempts. Parent comment

Re:Visualizing the locations of malicious login attempts by iforgotpassword on Friday April 26, 2024 @02:48AM (#40166568)
1. Scrape GitHub et al for accidentally committed private keys, maybe even get the appropriate username.

2. Run botnet that tries all these keys on the entire Internet.

3. Profit!

[ Parent | on HN ]
Re:Visualizing the locations of malicious login attempts by ykonstant on Friday April 26, 2024 @03:45AM (#40166806)
Why is GitHub not(?) hosting a flock of repos* with fake private keys/username pairs to annoy/deter those people?

*Flock because of the Cloud? What is the appropriate noun for many repos?

[ Parent | on HN ]