![]() It seems like a long time ago, right? Secrets leakage seems to remain pervasive and constant, happening to all kinds of developers-as explained by this study from NC State University. Hashicorp Vault, a tool for managing secrets and encrypting data in transit, was first announced in 2015, and Spring Vault, the integration of Spring with Vault, was first released in 2017. It seems someone got access to the company’s database using login credentials found in a GitHub public repository. Later, in 2014, data on 50,000 Uber drivers were stolen. It was speculated that the shutdown was because the feature allowed any user to search for all kinds of secrets stored in GitHub repositories. ![]() ![]() A day after the release, however, they had to partially shut it down. In 2013, GitHub released a search feature that allows users to scan code in all public repositories. ![]()
0 Comments
Leave a Reply. |