That is an interesting URL
I was hoping to grab more interesting one, but it seems her profile didn’t get updated for quite a while as seen through EC’s instance.
https://ec.social-network.europa.eu/@alina@girldick.gayAnyway, yes, the European Commission officially hosts their own Mastodon server.
It’s a mastodon instance
I’m just impressed with the URL, its very strong
It goes big and hard
( ͡• ͜ʖ ͡•)
Also, click her profile, love what she’s put in there, like RAADS-R score 🤣
I’m glad I learned this lesson in high school & not while working in industry
You also changed the actual values, right?
Right……???
commit credentials
change credentials
blank out credentials and recommit
create modsec rule to send anyone who ties to send a request with said key to a honeypot fail2ban jail
???
profit
Never, you have key but now you have to find the lock! It’s a treasure hunt!
Your reward? Probably some random cat pictures.
its fine you obvs dont have to rotate your keys because you just git rm’d it.
Though if a secret has ever been uploaded to GitHub, even if you scrubbed it from history within minutes, you should assume it’s compromised and generate new credentials.
And thats why I like the idea of fossil. Make those mistakes hurt!
Is the joke here that the secrets are still available in git history? Because it’s not like recycling a secret after realising it was exposed is a normal thing to do, right?
Correct
