4 ms·
I don't know how you'd stop this. If people are so careless with their credentials, is it the responsibility of sites like Trello to protect them?
by blowski 8y ago
I don't know how you'd stop this. If people are so careless with their credentials, is it the responsibility of sites like Trello to protect them?
- orf 8y agoMaybe Trello could make the fact that the board is public more visible? Like a banner or somesuch?
- rmsaksida 8y agoI tried to create a Trello board just now and the default visibility setting is private. I assume that hasn't always been the case, otherwise people really went out of their way to make these boards public.
- zapu 8y agoI don't think that was always the case. Recently I was googling my name and I found out I have bunch of Trello boards for various student projects that I completely forgot about (think "startups" but we've never gotten anywhere with them). I was surprised to see that. I don't think we deliberately made it public.
- zulln 8y agoMade them "public" to share with a friend or so, not realising it is also indexed?
- sethammons 8y agoI think Trello should be doing similar scraping, automatically. My work does, granted it is potentially a bit easier in our case. We scan things like GitHub repos and looks for credentials into our system, and, if found, deactivate the credential and reach out to the customer.
- timvdalen 8y agoGitHub does this as well with API keys, I believe. If they find them in a commit, they'll automatically revoke them.
- guessmyname 8y agoSlack does this as well with API tokens, I believe. If they find them in a commit, they'll automatically revoke them.
- leetcrew 8y agoi'm guessing your name is timvdalen?
- martin-adams 8y agoFor a start, Trello could noindex them by default
- deleted 8y ago[deleted]