4 ms·
Brave? Or dumb? Using someone else’s credentials is against the law in most jurisdictions.
by tinus_hn 6y ago
Brave? Or dumb? Using someone else’s credentials is against the law in most jurisdictions.
- ceejayoz 6y agoIntent tends to matter. I once reported an exposed AWS access key (someone posted it to StackOverflow) to AWS support and they weren't quite sure what to do with it; gave me instructions on how to disable it in the Console, but it wasn't mine. I gave up after a couple rounds and just committed it to Github; their credential monitoring bot disabled it within seconds.
- Aeolun 6y ago> their credential monitoring bot disabled it within seconds This is Amazon’s monitoring bot right?
- bombcar 6y agoIt’s a GitHub feature: https://docs.github.com/en/code-security/secret-security/about-secret-scanning https://docs.github.com/en/code-security/secret-security/abo...
- tinus_hn 6y agoI’m not sure what that anecdote says about the legality of using these keys to authenticate as someone you’re not.
- ceejayoz 5y agoI misused someone's credentials with good intent. It's an example of why intent matters, and the CFAA (and lots of other laws) includes wording like "knowingly and with intent to x" in quite a few spots.