4 ms·
Dude, AI has been shown to execute queries on coworkers env files, extract master keys, decrypt variables and push to production.
by digitaltrees 5mo ago
Dude, AI has been shown to execute queries on coworkers env files, extract master keys, decrypt variables and push to production.
- cpursley 5mo agoWhy are important push secrets in a dev env config? Btw humans devs make this same mistake all the time.
- digitaltrees 5mo agoumm lots of providers have cli tools: ‘heroku run rails db:drop —-app {name}’ railway, fly.io etc. so unless you don’t ever use their cli tools locally there’s a vector. Plus CI/CD might also have credentials to do things like run migrations.
- cpursley 5mo agoWell that’s a developer problem, then. We use fly but prod secrets are not saved locally.
- digitaltrees 5mo agoSo you can’t ssh into the pg or database?