2 ms·
1. Scrape GitHub et al for accidentally committed private keys, maybe even get the appropriate username. 2. Run botnet that tries all these keys on the entire
by iforgotpassword 2y ago
1. Scrape GitHub et al for accidentally committed private keys, maybe even get the appropriate username.
2. Run botnet that tries all these keys on the entire Internet.
3. Profit!
- ykonstant 2y agoWhy is GitHub not(?) hosting a flock of repos* with fake private keys/username pairs to annoy/deter those people? *Flock because of the Cloud? What is the appropriate noun for many repos?