Viewing profile — mcdwayne

This was on public GitHub, which anyone can scan for anything. Their API is a firehose you can consume: https://api.github.com/events GitGuardian's public report on secrets sprawl …

Basically, rotate as soon as you can* and start looking through your AWS logs and setting to see if any services you don't recognize have been spun up. Is you think you have been a…

When will devs stop hardcoding passwords? smh.

Another take: https://blog.gitguardian.com/dropbox-breach-hack-github-circ...

FYI - GitGuardian is free for individuals and teams smaller than 25

Yikes. It is sad to hear stories like that, where security is not a concern until panic sets in. :( Yet another reason we need to adopt standards like security.txt and make it easy…

Toyota is claiming no, not with this leak. It was a partial repo that was exposed. The data they accessed with the key got customer ID numbers and emails only.