API Keys, API Keys everywhere
It's common knowledge that developers often leak sensitive information when they publish open source code. A single mistake can accidentally leak out enough information for an attacker to infiltrate a company and tear it down from the inside out or rack up huge bills in the name of mining bitcoin
It's common knowledge that developers often leak sensitive information when they publish open source code. A single mistake can accidentally leak out enough information for an attacker to infiltrate a company and tear it down from the inside out or rack up huge bills in the name of mining bitcoin . The concept of secret confidential information is very often lost on people in the name of ease. By taking a simple script we can get a few AWS keys pretty quickly: #!/usr/bin/python # -*- coding: utf-8 -*- import requests import time from bs4 import BeautifulSoup def github_login(username, password
related reading
- Everything I know about good API designseangoedecke.com
- Why We Don’t Trust the Database With Authentication – Sturdy Statisticsblog.sturdystatistics.com
- [2608.09867] Stealing Reasoning Traces from Proprietary LLM APIsarxiv.org
- How to Manage GitHub Actions Secretsinfisical.com
- Free for Developersfree-for.dev
- What I learned from looking at 900 most popular open source AI toolshuyenchip.com
- Questions I'm asking in interviewsjvns.ca
- GitHub - public-apis/public-apis: A collective list of free APIsgithub.com
- Hiding Secrets in Android Appsrammic.github.io
- Multiple SSH keys for different accounts on Github or Gitlab (Example)coderwall.com
- Stolen Thoughtsstolen-thoughts.com
- Hacking OpenAIhacktron.ai