How to mitigate risk from secrets leaks
reversinglabs.com
How to mitigate risk from secrets leaks
1–10 of 60 posts
Re: How to mitigate risk from secrets leaks
#2100% developers leaked JWT token .
Re: How to mitigate risk from secrets leaks
#3100% developers leaked JWT token .
Aren't JWT tokens supposed to be public?
Re: How to mitigate risk from secrets leaks
#4Re: How to mitigate risk from secrets leaks
#5Earlier quoted context omitted.
Aren't JWT tokens supposed to be public?
Honest question, in terms of grammar, is JWT token similar to ATM machine? I always feel weird just saying “JWT” and almost always add the “token” part to the end for clarity, is that common?
> RAS syndrome (where "RAS" stands for "redundant acronym syndrome", making the phrase "RAS syndrome" homological) is the redundant use of one or more of the words that make up an acronym (or other initialism) in conjunction with the abbreviated form.
> Many style guides advise against usage of these redundant acronyms in formal contexts, but they are widely used in colloquial speech.
Re: How to mitigate risk from secrets leaks
#6Does this include deliberately sharing an API key, but in a 'not best practices' way?
ie. "Here, just run document.cookie='SID=EB73542386AF235' " Then you'll be logged in as an account that can do what you're trying to do.
Re: How to mitigate risk from secrets leaks
#7Earlier quoted context omitted.
Aren't JWT tokens supposed to be public?
Honest question, in terms of grammar, is JWT token similar to ATM machine? I always feel weird just saying “JWT” and almost always add the “token” part to the end for clarity, is that common?
I try hard to just say "the JWT". But I also try to only say "ATM"
Re: How to mitigate risk from secrets leaks
#8Earlier quoted context omitted.
Aren't JWT tokens supposed to be public?
Honest question, in terms of grammar, is JWT token similar to ATM machine? I always feel weird just saying “JWT” and almost always add the “token” part to the end for clarity, is that common?
"Personal PIN Identification Number" is my favourite example.
Re: How to mitigate risk from secrets leaks
#9and that's why you use secret managers like infisical
Re: How to mitigate risk from secrets leaks
#10Earlier quoted context omitted.
Honest question, in terms of grammar, is JWT token similar to ATM machine? I always feel weird just saying “JWT” and almost always add the “token” part to the end for clarity, is that common?
I try hard to just say "the JWT". But I also try to only say "ATM"
Bonus points if you pronounce it like a Greek "ω" (joat) or a Welsh "w" (joot)!