3 ms·
Of course there are trivial solutions to this issue. Nonetheless, this is a common mistake, whether you believe it or not. And if it is common, then it will be
by elcomet 6y ago
Of course there are trivial solutions to this issue.
Nonetheless, this is a common mistake, whether you believe it or not. And if it is common, then it will be exploited.
- oefrha 6y agoThe premise of my original post is that ignoring secrets.py but not secrets.pyc is probably not very common. TFA claims "thousands of GitHub repositories contain secrets hidden inside their bytecode", which is probably true, but at least the vast majority of those have secrets.py in plain sight as well, no decompiling necessary; and TFA doesn't actually demonstrate any effort to filter those out.