GitHub commit search: “remove password”
github.com
GitHub commit search: “remove password”
1–10 of 266 posts
Re: GitHub commit search: “remove password”
#2I'd hope that all those people promptly changed their passwords after realising. But 200k commits, I'm sure a good percentage of them didn't.
Re: GitHub commit search: “remove password”
#3Or try "remove aws"
Re: GitHub commit search: “remove password”
#4Git-crypt is your friend!
Re: GitHub commit search: “remove password”
#5[deleted]
Re: GitHub commit search: “remove password”
#6Or try "remove aws"
I tried "fuck", but it's nowhere near as prevalent as "remove password"
Re: GitHub commit search: “remove password”
#7Right after my "remove secrets" post: https://news.ycombinator.com/item?id=13650614
There are just so many of those it's crazy:
remove .env
YOURFAVORITEAPI_SECRETKEY
YOURFAVORITEAPI_PASSWORD
And replace "YOURFAVORITEAPI" with CircleCI, Travis, Mailchimp, Trello, Stripe, etc, etc.
Also, companies I contacted consider it the customer fault and basically don't care.
Re: GitHub commit search: “remove password”
#8Related topic: "Production AWS keys on GitHub" ~ 3 years ago
https://news.ycombinator.com/item?id=7411927
By just looking quickly, it seems that you can still find many recent live keys...