←back to thread

I scanned all of GitHub's "oops commits" for leaked secrets

(trufflesecurity.com)
199 points elza_1111 | 1 comments | 03 Jul 25 06:44 UTC | HN request time: 0.222s | source
Show context
NoahZuniga ◴[03 Jul 25 06:57 UTC] No.44452378[source]▶
I find it hard to believe that they could have made $25k with this. There are companies that scan all commits on gh for secrets, using similar techniques for finding secrets in files.
replies(4): >>44452421 #>>44452521 #>>44452553 #>>44453322 #
1. Sayrus ◴[03 Jul 25 07:31 UTC] No.44452553[source]▶
"70% of secrets leaked in 2022 remain valid today"[1] is a quote that should help understand the situation.

[1] https://blog.gitguardian.com/the-state-of-secrets-sprawl-202...