5 ms·
In principle your dotfiles shouldn't contain any sensitive data. It's not burying the lede, it's just that you read the article and decided that some important
by adrusi 11y ago
In principle your dotfiles shouldn't contain any sensitive data. It's not burying the lede, it's just that you read the article and decided that some important warning was so important that it was the purpose of the whole piece.
The reasons they offer might not be the most convincing, but they're something, which is better than nothing. Suppose you have a bunch of configuration that you're sure contains no sensitive information and you've decided to sync it between machines somehow. Why not use github, assuming you're already a github user.
- username223 11y agoI agree with you in principle, but in practice putting your config on GitHub is asking to be pwned. If you put your personal config on a public server, the odds are good that you'll eventually leak some information you shouldn't have. If you're lucky, Amazon's bot will find the API key and disable it, and you'll waste a bit of time getting a new one. If you're less lucky, you'll pay for someone's bitcoin miner. If you're unlucky, someone will quietly pwn you bit by bit, it will take you months or years to discover it, and you may never figure how how they did it. When "scp" and "rsync" exist, and git is a distributed version control system, it's hard to justify unnecessarily exposing data on the web.