Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
NoahZuniga
on July 3, 2025
|
parent
|
context
|
favorite
| on:
I scanned all of GitHub's "oops commits" for leake...
I find it hard to believe that they could have made $25k with this. There are companies that scan all commits on gh for secrets, using similar techniques for finding secrets in files.
Sayrus
on July 3, 2025
|
next
[–]
"70% of secrets leaked in 2022 remain valid today"[1] is a quote that should help understand the situation.
[1]
https://blog.gitguardian.com/the-state-of-secrets-sprawl-202...
xarope
on July 3, 2025
|
prev
|
next
[–]
this is specifically deleted commits, which even if locally are deleted, are not so on GH, hence why he was able to find deleted .envs etc.
bashwizard
on July 3, 2025
|
prev
|
next
[–]
I'm surprised that it's not more. I couple of years ago I spent a few months basically github dorking for leaked api keys and made more than that.
wordofx
on July 3, 2025
|
prev
[–]
Congrats on commenting without reading the article.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
