flâneur — a map of the web's best reading

API Keys, API Keys everywhere

blog.kchung.co · 594 words · saved by 1 readers

It's common knowledge that developers often leak sensitive information when they publish open source code. A single mistake can accidentally leak out enough information for an attacker to infiltrate a company and tear it down from the inside out or rack up huge bills in the name of mining bitcoin

It's common knowledge that developers often leak sensitive information when they publish open source code. A single mistake can accidentally leak out enough information for an attacker to infiltrate a company and tear it down from the inside out or rack up huge bills in the name of mining bitcoin . The concept of secret confidential information is very often lost on people in the name of ease. By taking a simple script we can get a few AWS keys pretty quickly: #!/usr/bin/python # -*- coding: utf-8 -*- import requests import time from bs4 import BeautifulSoup def github_login(username, password

Explore this link on the map →

related reading