3 ms·
Are you talking about this? wandb_key = ... wandb.login(...) It's rather weird that they would add keys to the source code like this, rather than read
by nextaccountic 1y ago
Are you talking about this?
wandb_key = ...
wandb.login(...)
It's rather weird that they would add keys to the source code like this, rather than reading from the environment or some secrets service. Rather than redacting the source, they should refactor to remove the keys from the source
- barbazoo 1y agoOne example, that's right. Another one: train_query = f""" SELECT {{feature_names}}, {",".join(labels)}, ... """ and right at the top: cat_names = [ ... ]
- mvdtnz 1y agoThere's no way you got to this bit without skipping over multiple actual redactions, like SQL queries with all of the details replaced with ellipsis. Why are you cherry-picking one innocent instance when you know exactly what the parent comment is talking about?
- bathtub365 1y agoSince it’s redacted we don’t know what was here. They could be redacting the names of the environment variables or other secrets names they use for credentials since a supply chain attack could more easily exfiltrate them if they know the name.