2 ms·
There's a lot of dotfiles on Github and it doesn't seem to be a problem (Except if you check in private credentials, but that's not a problem unique to dotfiles
by dewey 8y ago
There's a lot of dotfiles on Github and it doesn't seem to be a problem (Except if you check in private credentials, but that's not a problem unique to dotfiles).
If you rely on your configuration to be secret to be secure it's just security by obscurity and not worth much anyway.
- personjerry 8y ago> If you rely on your configuration to be secret to be secure it's just security by obscurity and not worth much anyway. What I had in mind is that the average person wouldn't be a target, but publicly declaring their security vulnerability would attract attacks they wouldn't receive otherwise.
- intertextuality 8y agoOnly key harvester bots on GitHub/etc would notice. If you’re being consciously attacked by someone then you have bigger problems to deal with. The solution isn’t particularly hard either, simply source a secrets file and make sure you add that to the gitignore file.