IncognitaTech – Medium

Feb 3

Using Twitter to notify developers who leaked their access tokens in GitHub: The Aftermath

Last week, we used Twitter Access Tokens exposed in GitHub to raise awareness regarding the consequences of forgetting secrets in public repositories, by using our @PinataHub_Bot. Although some considered our campaign rather controversial, the response of affected Twitter users was overwhelmingly positive, with dozens of people expressing their appreciation. …

Twitter

4 min read

Jan 24

Using Twitter to notify careless developers — the unorthodox way (Or, how you could use GitHub to compromise 9.5K Twitter accounts without “hacking”)

If you are reading this, you probably already know how critical it is to NOT hardcode credentials into source code, especially if this code is going to be committed in a public GitHub repo. Certainly, GitHub knows this too, and they provide secret scanning for all public repositories, as part…

Github

5 min read

Using Twitter to notify careless developers — the unorthodox way

Jan 17

Introducing PinataHub: Explore the world of leaked secrets in GitHub.

In our first article, we will walk you through the just-released PinataHub platform, the largest archive of leaked credentials and secrets in public GitHub repositories. Some background: Forgetting secrets in the source code is a very common problem in the DevOps world, which can have disastrous consequences for any organization. Many have…

Dev Ops

6 min read

Introducing PinataHub: Explore the world of leaked secrets in GitHub.