Show HN: URL Canary – Get an alert when someone finds your secrets
1–10 of 122 posts
Re: Show HN: URL Canary – Get an alert when someone finds your secrets
#2This is neat.
For added security, maybe better to hide the canary URL in a bit.ly link? Someone might know your 3 URLS.
Re: Show HN: URL Canary – Get an alert when someone finds your secrets
#3This is neat. For added security, maybe better to hide the canary URL in a bit.ly link? Someone might know your 3 URLS.
Great idea! Might even be possible to sort that out for the user automatically...
Re: Show HN: URL Canary – Get an alert when someone finds your secrets
#4This looks neat. What is a good use-case for your average techy? What about your average non-techy?
Re: Show HN: URL Canary – Get an alert when someone finds your secrets
#5This looks neat. What is a good use-case for your average techy? What about your average non-techy?
It can be useful anywhere you have sensitive information that you wouldn't want to fall into the wrong hands, or more specifically that you would want to find out if it did.
It could go in backups, in your git repository, bug tracker, internal wiki, etc.
For an average non-techy, I don't know... they might want to put one in their diary?
Re: Show HN: URL Canary – Get an alert when someone finds your secrets
#6This is neat. For added security, maybe better to hide the canary URL in a bit.ly link? Someone might know your 3 URLS.
Doesn't bit.ly access the url? Either at creation time or at any point later on?
Re: Show HN: URL Canary – Get an alert when someone finds your secrets
#7I don't understand this. Someone just visits the URL and I get a email notification? If it's supposed to be secret, how does the script knows if the visit is OK or not, sending me the notification only when it's OK? Are the good guys supposed to know this is a sort of "honeypot" URL and not visit it?
Re: Show HN: URL Canary – Get an alert when someone finds your secrets
#8This looks neat. What is a good use-case for your average techy? What about your average non-techy?
It can be useful anywhere you have sensitive information that you wouldn't want to fall into the wrong hands, or more specifically that you would want to find out if it did. It could go in backups, in your git repository, bug tracker, internal wiki, etc. For an average non-techy, I don't know... they might want to put one in their diary?
For any web/cloud service, I think this might be easily triggered when the service is trying to be helpful. I.e. when fetching previews, displaying in/active links, etc...
Re: Show HN: URL Canary – Get an alert when someone finds your secrets
#9I don't understand this. Someone just visits the URL and I get a email notification? If it's supposed to be secret, how does the script knows if the visit is OK or not, sending me the notification only when it's OK? Are the good guys supposed to know this is a sort of "honeypot" URL and not visit it?
You won't share the URL in a public place, you'll store it alongside whatever you're trying to keep safe.
If the URL gets accessed at all, you will know your secret has been leaked.
Re: Show HN: URL Canary – Get an alert when someone finds your secrets
#10I don't understand this. Someone just visits the URL and I get a email notification? If it's supposed to be secret, how does the script knows if the visit is OK or not, sending me the notification only when it's OK? Are the good guys supposed to know this is a sort of "honeypot" URL and not visit it?
[deleted]