3 ms·
FYI You probably don't want upload your secret keys in plaintext to GitHub: https://github.com/crobertsbmw/deckofcards/blob/687881c8408aedbe78979205ac9a4fd71b37
by Kortaggio 11y ago
FYI You probably don't want upload your secret keys in plaintext to GitHub: https://github.com/crobertsbmw/deckofcards/blob/687881c8408aedbe78979205ac9a4fd71b37ec9e/spades/settings.py#L13 https://github.com/crobertsbmw/deckofcards/blob/687881c8408a...
- gknoy 11y agoNote also: The github event feed appears to be public, so people have often had bots listen automatically for keys for exploitation. I recall reading (earlier this year?) about how someone had some $Ludicrous AWS bills because of this.
- crobertsbmw 11y agoYeah, I noticed that as soon as I uploaded it. So I changed the keys that are in production from that which is on github.