8 ms·
> or someone else was faster than you, got access and regenerated new keys for themselves There are many people who do these types of searches - regularly. If
by IncRnd 4y ago
> or someone else was faster than you, got access and regenerated new keys for themselves
There are many people who do these types of searches - regularly. If there is any key material checked into gh, consider it immediately compromised, even if the repo is removed.
- capableweb 4y agoTons of automated scraping for these sort of things as well, with the whole flow of "check if key is working, check permissions, if authorized, generate new key and deactivate old one".
- IncRnd 4y agoYes. There are indeed several mitigations in place. However, my point was that within 5 seconds of looking at this tool I was able to uncover hundreds of potential issues. There are many other regexs I have on my list. Please don't fall into the trap of "we have anti-virus, so we can't get attacked."
- capableweb 4y agoSorry if I was unclear, my previous comment was about attackers doing that in order to compromise infrastructure, not that companies are doing it in order to defend themselves. But companies probably do it to defend themselves as well, but I'm not as familiar with that as with the other side of things.