3 ms·
Here's a story for reference: http://www.devfactor.net/2014/12/30/2375-amazon-mistake/ http://www.devfactor.net/2014/12/30/2375-amazon-mistake/ More about bots
by withdavidli 12y ago
Here's a story for reference: http://www.devfactor.net/2014/12/30/2375-amazon-mistake/ http://www.devfactor.net/2014/12/30/2375-amazon-mistake/
More about bots scanning github for api keys, that's pretty scary in itself because I know pushing keys by accident happens a lot.
- juliangregorian 12y agoYeah, Amazon's key model is a pretty big weak point, both Google Cloud and Azure handle it better. It would be safer to use different sets of keys, like one to create new machines, and app-specific keys that can update only, but that's more work and more headache to manage. Google Cloud just makes me SSH tunnel, which I like.