Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 31 Mar 2021 11:02:43 -0700
From:      Jose Quinteiro <freebsd@quinteiro.org>
To:        freebsd-ports@freebsd.org
Subject:   Re: Lessons from the PHP git repo "hack"
Message-ID:  <d31d55af-a2ba-33a0-806b-fbd99d9efb9e@quinteiro.org>
In-Reply-To: <1035BFA8-667D-45CD-9066-848351F648EF@kreme.com>
References:  <6314D726-F55D-4374-AB63-B17B7B3E4D14@kreme.com> <20210331135819.rzy3weyxunobnne6@nexus.home.palmen-it.de> <1035BFA8-667D-45CD-9066-848351F648EF@kreme.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On 3/31/21 7:03 AM, @lbutlr wrote:
> 
> That is making an assumption that the people running the php git server were incompetent, which is not something I am willing to do at this point.
> 
Isn't it too early to learn any lessons, then?

I've found passwords checked into public Github repos more than once. I
don't equate Github with security.

Thanks,
Jose



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?d31d55af-a2ba-33a0-806b-fbd99d9efb9e>