Top all-time · #22711
Tillson Galloway
Personal blog · tillsongalloway.com · on HN as eax-eipsecurityprogramming
Tillson Galloway writes Tales of a Postgraduate Nothing, a personal blog at tillsongalloway.com about security and programming. Since 2020, 3 different Hacker News readers have linked it 3 times, most often “How I made 10K in bug bounties from GitHub secret leaks”. The last post was in 2020, but the archive is still widely read.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
Linked for a write-up of an experiment committing secrets to a public Git repository, which is cited as an example of secret leaks. The only comment is by the OP and points to other papers and reports.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- How I made 10K in bug bounties from GitHub secret leaks2 people · 2 mentions · first linked 2020-05-12
What Hacker News says?
Greetings fellow Hackers! OP here. I see that my experiment got some traction which means more awareness should be spread about this class of bugs. For starters I recommend reading "How Bad Can It Git" [1] and "Detecting and Mitigating Secret-Key Leaks inSource Code Repositories" [2] papers. After that you can read "How I made $10K in bug bounties from GitHub secret leaks" [3] and some notable reports on HackerOne H…
Comment linking /finding-sensitive-information-on-github/index.html
on “What will happen when you commit secrets to a public Git repo?”Submitted How I made 10K in bug bounties from GitHub secret leaks as a story · 7 points
HN discussionSubmitted How I made $10K in bug bounties from GitHub secret leaks as a story · 5 points
HN discussion