5 ms·
> Mine are on Github, but in a private repo. The fact that Amazon has paid engineers to write a bot that scans for API keys suggests that most people aren't th
by username223 11y ago
> Mine are on Github, but in a private repo.
The fact that Amazon has paid engineers to write a bot that scans for API keys suggests that most people aren't that careful, or willing to spend $7/mo so they can use private repos. It sounds like you're doing it right, but most people seem to be doing it wrong.
- adrtessier 11y ago> The fact that Amazon has paid engineers to write a bot that scans for API keys suggests that most people aren't that careful The fact that GitHub has not paid engineers to write a bot that scans for API keys, RSA keys, and other common credentials mistakenly committed and dropping the files from UI view / search indices without notification and explicit permission surprises me a lot more. The company seems to be full of great engineers and UI people; doing something like this would vastly improve the UX of developers beginning to use the platform, and would likely not get in the way of seasoned ones.
- techdragon 11y agoThe fact no one muss mentioned that Bitbucket provides Free Private Repos eliminating the "can't be bothered paying" aspect is amazing and it makes the question "why would you not just put them in a private git/hg repo, it's practically free backups!"
- OJFord 11y ago> most people aren't ... willing to spend $7/mo so they > can use private repos Ah. I'm a student, I forgot there was a fee normally. Still, there's Bitbucket and others, or self-hosted if so inclined.