3 ms·
There are hundred of setups like that already. If you push an AWS key or similar publicly you may have a bitcoin miner or botnet running on your cloud in matter
There are hundred of setups like that already. If you push an AWS key or similar publicly you may have a bitcoin miner or botnet running on your cloud in matter of minutes.
Nope. Because if you push an AWS key then it gets automatically revoked by AWS.
I wouldn't rely on anything other than rotating leaked credentials.
AWS was just an example, but it kinda proves my point though, that people are already monitoring this ;)
The point here being the blog is about looking for oops commits to spot keys that would otherwise not necessarily be picked up automatically...