News for hackers. Stuff that matters.

A comment on When a bad day gets worse – getting hacked twice in one day. Parent comment

Re:When a bad day gets worse – getting hacked twice in one day by jaryd on Tuesday May 06, 2014 @01:20PM (#7705822)
Looks like a good opportunity for an open source tool that scans a git repository for interesting/private information. Obviously it could be used for nefarious purposes, but it would be helpful for anyone looking to open source an existing repo.

Another alternative is to store credentials in environment variables :)

[ Parent | on HN ]
Re:When a bad day gets worse – getting hacked twice in one day by moot on Tuesday May 06, 2014 @01:29PM (#7705878)
> Looks like a good opportunity for an open source tool that scans a git repository for interesting/private information.

These already exist in droves, which is exactly how our Amazon credentials were found.

http://www.itnews.com.au/News/375785,aws-urges-developers-to...

[ Parent | on HN ]
Re:When a bad day gets worse – getting hacked twice in one day by jdhendrickson on Tuesday May 06, 2014 @02:53PM (#7706382)
I wasn't cognizant of the need to include a step in which you scan your own repo, just as a fail safe. So thanks for posting this.
[ Parent | on HN ]
Re:When a bad day gets worse – getting hacked twice in one day by yeukhon on Tuesday May 06, 2014 @07:33PM (#7707805)
Time for this question to come back live.

http://security.stackexchange.com/questions/56911/does-anyon...

Anyone has any idea about this website I am trying to find?

[ Parent | on HN ]
Re:When a bad day gets worse – getting hacked twice in one day by ufmace on Tuesday May 06, 2014 @01:55PM (#7706037)
Probably a good practice. For my current project, I've been careful to never commit any API credentials or other secrets to the repo, even though I don't currently have any intention of making it public. It's harder to know what you're missing, though.
[ Parent | on HN ]