2 ms·
Not much of a downside, but it means that they are really easy to detect for attackers as well. Really easy to just grep through something looking for that pre
by dghlsakjg 4y ago
Not much of a downside, but it means that they are really easy to detect for attackers as well.
Really easy to just grep through something looking for that prefix
- jamesfinlayson 4y agoYep - this way my thought. I've been bitten by this is in the past: an endpoint was throwing an error and dumping out environment variables (which included API keys) - the prefixed API keys were found by crawlers and abused but the unprefixed keys were untouched (though they were cycled just in case).