4 ms·
If someone being able to download your source code repository is opening yourself up to attacks, you're doing something wrong. Either you are relying on securit
by Kenji 9y ago
If someone being able to download your source code repository is opening yourself up to attacks, you're doing something wrong. Either you are relying on security through obscurity, or you checked keys into git. Both horrible practices.
- vultour 9y agoDo you give everyone complete access to your production code?
- kuschku 9y agoYes? It’s under GPL, after all.
- falsedan 9y ago> you checked keys into git. Both horrible practices. Hey! That's not very kind to disparage everyone using a text file in a git repo to manage their passwords/keys. Putting keys into a git repo is fine! But be careful when publishing that repo, as something you thought was private could suddenly become public.
- zandor 9y agoIt still is a pretty bad practice though.
- falsedan 9y agoI would do it, if I was certain I could avoid accidentally publishing the repo. I'd never describe it as 'bad', as that's extremist & it's easy for someone who does this to misinterpret you as saying, "you are bad for doing this and not following best practices".