That's fine, it happens :) Yeah we've seen that git module. We use something similar to that. I was also thinking inadvertent log capture as well. Capturing c

That's fine, it happens :) Yeah we've seen that git module. We use something similar to that. I was also thinking inadvertent log capture as well. Capturing creds in an ELK stack is just as bad. And I'm guessing this FB issue is some variation of complete logging snarfing creds. I'm just trying to think of coherent ways we can scan, detect, and act on creds that work across a backend. Seems to be a rather large hole.