Stop Slacking your secrets. Use GitHub instead.
Three months ago a friend of mine onboarded a contractor. He DM'd him the .env. Standard practice....
Opening excerpt (first ~120 words) tap to expand
try { if(localStorage) { let currentUser = localStorage.getItem('current_user'); if (currentUser) { currentUser = JSON.parse(currentUser); if (currentUser.id === 3906459) { document.getElementById('article-show-container').classList.add('current-user-is-article-author'); } } } } catch (e) { console.error(e); } boltenv Posted on Apr 30 Stop Slacking your secrets. Use GitHub instead. #secrets #webdev #programming #productivity Three months ago a friend of mine onboarded a contractor. He DM'd him the .env. Standard practice. Two days later the contractor pushed a debug log to a public repo with one of the keys still in it. They rotated. Customers didn't notice. But that file is still in his Slack archive. It's still in the contractor's Slack archive. It's still cached on two computers.
…
Excerpt limited to ~120 words for fair-use compliance. The full article is at DEV.to (Top).