←back to thread

I scanned all of GitHub's "oops commits" for leaked secrets

(trufflesecurity.com)
199 points elza_1111 | 1 comments | 03 Jul 25 06:44 UTC | HN request time: 0.321s | source
Show context
NoahZuniga ◴[03 Jul 25 06:57 UTC] No.44452378[source]▶
I find it hard to believe that they could have made $25k with this. There are companies that scan all commits on gh for secrets, using similar techniques for finding secrets in files.
replies(4): >>44452421 #>>44452521 #>>44452553 #>>44453322 #
1. bashwizard ◴[03 Jul 25 09:44 UTC] No.44453322[source]▶
I'm surprised that it's not more. I couple of years ago I spent a few months basically github dorking for leaked api keys and made more than that.