The researchers found 1,748 active, verified credentials from major service providers (including Amazon Web Services, Stripe and OpenAI). These credentials were found publicly accessible within the live code of websites.
I mean, what else is new?
post
replies:
3 comments in c/cybersecurity@sh.itjust.works view that post
Remember when writing a client side JavaScript application all that code is transferred to the client machine and executed. Don't put any sensitive code or strings in that code.
replies:
Sigh. Don't hardcode credentials in scripts, especially client-facing ones! If you must have credentials in plaintext on a file system, at least do something like PostgreSQL's pgpass file (and don't commit it to your version control system, or have it accessible via your web server!) with the appropriate user permissions set on it.
1 comment in c/cybersecurity@infosec.pub view that post
The researchers found 1,748 active, verified credentials from major service providers (including Amazon Web Services, Stripe and OpenAI). These credentials were found publicly accessible within the live code of websites.
I mean, what else is new?
all 2 comments