71–80 of 113 posts
Interesting: https://github.com/search?p=4&q=gmail_password&ref=s... https://github.com/search?p=4&q=secret_token&ref=sea...
This is dangerous. But then again, is it Github's responsibility to keep these people from shooting themselves in the foot?
Oh my. And suddenly, github gave grep to the web. Thanks for that great work.
Interesting: https://github.com/search?p=4&q=gmail_password&ref=s... https://github.com/search?p=4&q=secret_token&ref=sea...
Found via Github search
Though I suppose you can just search for <500 and stop looking when you get to 300.
Interesting: https://github.com/search?p=4&q=gmail_password&ref=s... https://github.com/search?p=4&q=secret_token&ref=sea...
That is terrifying, I just logged in with three separate accounts and they worked. Obviously I logged out without fucking around with anything; why mess with somebody's professional work. This is dangerous. But then again, is it Github's responsibility to keep these people from shooting themselves in the foot?
No.
Earlier quoted context omitted.
I did change the readme to point to the new mainline development. I still think there might be some utility in having the code as I left it around, so I didn't delete the repo.
Deleting your repo and recreating it as a fork of the new upstream may be a good idea, although it does break the links to all of the other repositories forked from yours. It really would be nice if Github handled this case better.
Cudos to github. I am running http://searchco.de/ I know how hard this problem actually is and they have done a fantastic job of it.
Nice! impressed by speed and quality of the results + features. Definitively going to use this in the feature. Also enjoyed your blog post on how to create a search engine.
Interesting: https://github.com/search?p=4&q=gmail_password&ref=s... https://github.com/search?p=4&q=secret_token&ref=sea...
Or SSH private keys. https://github.com/search?q=path%3A.ssh%2Fid_rsa&type=Co...
https://www.google.com/search?q=site%3Agithub.com+inurl%3A.s...
Earlier quoted context omitted.
That is not the only disturbing part. SSH private key by itself is not much of a threat, but bundled together with known_hosts is a recipe for disaster.
https://github.com/gomachan/dotfiles/tree/master/.ssh
This kind of thing is best suited for a private repo (github is still ok, just make it private) - cause it's most likely of no use to anyone but that single user.