News for hackers. Stuff that matters.

pr0tocol_7

You can use gitleaks to do this now. I added that feature in v3: https://github.com/zricethezav/gitleaks/releases/tag/v3.0.0
Re:JSON as configuration files: please don’t (2016) on Saturday April 13, 2019 @12:33PM (#19653997)
I like Toml for my config files. Clear and simple format.
https://github.com/zricethezav/gitleaks plugging my own tool. You can enforce custom rules like entropy ranges + custom regexes to get less false positives similar to what is described under "Validity Filters" in this article.
Re:Why Don't Americans Understand How Poor Their Lives Are? on Thursday April 04, 2019 @09:35AM (#19572077)
100% Except its not a spoiled rich kid, it's a man with "20 years of experience in technology" who is most certainly not a poor american.
Re:Hyperscan: A Fast Multi-Pattern Regex Matcher for Modern CPUs on Thursday February 28, 2019 @11:21AM (#19272447)
Hyperscan is also used for scanning repos at Github: https://github.blog/2018-10-17-behind-the-scenes-of-github-t.... I have a similar project for scanning repos, https://github.com/zricethezav/gitleaks and plan on adding hyperscan functionality in a future release. Really speeds up scans when trying to match many regexes.
Re:Show HN: Gitleaks v1.0.0 - Audit git repos for secrets on Saturday July 21, 2018 @02:07PM (#17583001)
good call, thanks!
made a little tool to catch these things https://github.com/zricethezav/gitleaks. working on a CI version of it right now as well. gotta protect those credentials.

edit: ci version here - https://github.com/zricethezav/gitleaks-ci. work in progress, trying to add readme and instructions tonight. Also if anyone is interested in making gitleaks-ci into a paid github app... hmu

Re:Ask HN: What tools do you use to automate your business? on Thursday April 19, 2018 @11:24AM (#16876658)
Can you explain how you use Terraform to automate google calendars?
Re:Show HN: Hex – Art from files on Sunday February 04, 2018 @04:23PM (#16305018)
very cool