3 ms·

It’s the key used by the attackers in the payload I think. So you publish it and a scanner will revoke it

• trees101 9mo ago
  oh I see, you're force-revoking someone else's key
  • rswail 9mo ago
    Which is an interesting DOS attack if you can find someone's key.
    • OJFord 9mo ago
      The interesting thing is that (if you're an attacker) your choice of attack is DoS when you have... anything available to you.
• freakynit 9mo ago
  Does this mean a program can be written to generate all possible api keys and upload to github thereby revoke everyone's access?
  • kylecazar 9mo ago
    They are designed to be long enough that it's entirely impractical to do this. All possible is a massive number.
    • freakynit 9mo ago
      That's true tho... possible, but impractical.
      • deleted 9mo ago
        [deleted]
      • cortesoft 9mo ago
        Only possible if you are unconstrained by time and storage.
        • eru 9mo ago
          Not only you, but GitHub too, since you need to upload. Storage is actually not much of a problem (on your end): you can just generate them on the fly.
      • antonvs 9mo ago
        Not possible given the amount of matter in the solar system and the amount of time before the Sun dies.