Viewing profile — lumberjack24

Forest Admin's out-of-the-box admin panel + the convenience of the cloud, this is all developers ever wanted for their internal tools!

To Casablanca, Morocco.

Hey, maybe try running a GitGuardian [1] scan on all those repositories to look for hardcoded secrets. GitGuardian can also test in some cases if the secrets are valid or not, mean…

geez.

“dark matter” sounds like marketing speak.

well, they haven’t turned my building’s heating on yet.

Here's a checklist [1] (again, from gitguardian) of steps to follow before open-sourcing projects and [2] a guide on how to remediate hardcoded/exposed secrets. [1] https://blog.gi…

Great idea, but hard to enforce. Just use a scanning CLI like TruffleHog, Gitleaks, or ggshield from GitGuardian to catch all sorts of hardcoded secrets.

GitGuardian actually does this, it monitors an extended perimeter of devs and their personal/open-source repos for corporate secrets or keywords – https://www.gitguardian.com/monit…

In the meantime, try ggshield cli https://github.com/GitGuardian/ggshield

The access model on platforms like GitHub is flawed, a single account can be used for both professional and personal projects/repositories, leading to “fat finger” errors like this…

I can’t help but wonder why qursān ended up being the final form instead of qursāl.

That hardcoded secret in the powershell script really was the key to the Uber ride-hailing kingdom – https://blog.gitguardian.com/uber-breach-2022 .

open to referrals?

show me the mrr

Photos don’t load on mobile :/

These folks must be retired by now and they have lived enough to find out they lost their crusade against computers.

Try https://www.specifyapp.com and thank me later!

Just like shrimps are sea cockroaches.

I’m 28 y.o and this is the first time I hear about garlic in a jar. U.S.A never ceases to amaze me.