4 ms·
Then obscure/mutate the actual secrets? Or really anything other than decreasing the barrier between would-be attackers and exposed secrets and then publicizin
by solidasparagus 7y ago
Then obscure/mutate the actual secrets?
Or really anything other than decreasing the barrier between would-be attackers and exposed secrets and then publicizing them on a website with very high viewership.
The HN community is better than many online communities, but it's still very large and this post is almost guaranteed to lead to someone using credentials found on this website.
- richardwhiuk 7y agoThere are already teams out their on the internet who will scrape credentials and use them - especially public cloud keys (e.g. AWS access credentials to create Bitcoin miners).
- solidasparagus 7y agoThe threat models are very different. This website introduces a new set of adversaries who do not need to build infrastructure that automatically takes advantage of leaked secrets.