TGViewer
Programming Programming @programmingreddit · 911 subscribers
Post #12411 74
Security researcher earns $25k by finding secrets in so called “deleted commits” on GitHub, showing that they are not really deleted
https://trufflesecurity.com/blog/guest-post-how-i-scanned-all-of-github-s-oops-commits-for-leaked-secrets

https://redd.it/1lpun8i
@programmingreddit
Trufflesecurity Guest Post: How I Scanned all of GitHub’s “Oops Commits” for Leaked Secrets ◆ Truffle Security Co. GitHub Archive logs every public commit, even the ones developers try to delete. Force pushes often cover up mistakes like leaked credentials by rewriting Git history. GitHub keeps these dangling commits, from what we can tell, forever. In the archive, they…
Open in Telegram All posts from @programmingreddit
More from @programmingreddit
  1. Oct 10, 2026Python Release Python 3.15.0 https://www.python.org/downloads/release/python-3150/ https:/…
  2. Oct 9, 2026this 16 yo kid gained access to 17 trillion microsoft users records, by using "admin" as u…
  3. Oct 9, 2026Release of Polars 2.0 https://pola.rs/posts/release-polars-2/ https://redd.it/1wzf37b @pro…
  4. Oct 8, 2026The people holding up the internet https://sheets.works/data-viz/holding-up-the-internet h…
  5. Oct 8, 2026Margaret Hamilton, computing pioneer who led software development for the Apollo program,…
  6. Oct 8, 2026State of Devs 2026 https://2026.stateofdevs.com/en-US/ https://redd.it/1x0asww @programmin…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →