←back to thread

I scanned all of GitHub's "oops commits" for leaked secrets

(trufflesecurity.com)
199 points elza_1111 | 1 comments | 03 Jul 25 06:44 UTC | HN request time: 0.209s | source
Show context
NoahZuniga ◴[03 Jul 25 06:57 UTC] No.44452378[source]▶
I find it hard to believe that they could have made $25k with this. There are companies that scan all commits on gh for secrets, using similar techniques for finding secrets in files.
replies(4): >>44452421 #>>44452521 #>>44452553 #>>44453322 #
1. xarope ◴[03 Jul 25 07:26 UTC] No.44452521[source]▶
this is specifically deleted commits, which even if locally are deleted, are not so on GH, hence why he was able to find deleted .envs etc.