Player FM uygulamasıyla çevrimdışı Player FM !
Preventing Data Leaks With Git Guardian
Manage episode 362236188 series 2568929
In this episode of the Forensic Focus podcast, Si and Desi talk to Mackenzie Jackson, Developer Advocate at Git Guardian.
Mackenzie discusses the problem of hard-coded and leaked credentials in Git repositories, the task of scanning Git repositories for leaked credentials, and how that’s helped by the setup of GitHub and Git.
He also looks at some public and private cases of security breaches through Git repositories and recommends tools you can use to combat attackers on Git.
Show Notes:
Toyota Suffered a Data Breach by Accidentally Exposing A Secret Key Publicly On GitHub (GitGuardian) - https://blog.gitguardian.com/toyota-a...
GitHub.com rotates its exposed private SSH key (Bleeping Computer) - https://www.bleepingcomputer.com/news...
Conpago - https://www.conpago.com.au/
Source Code as a Vulnerability - A Deep Dive into the Real Security Threats From the Twitch Leak (GitGuardian) - https://blog.gitguardian.com/security...
Teenagers Leveraging Insider Threats: Lapsus$ Hacker Group (Forbes) - https://www.forbes.com/sites/emilsaye...
Lapsus$: Oxford teen accused of being multi-millionaire cyber-criminal (BBC) - https://www.bbc.co.uk/news/technology...
Dynamic Secrets (HashiCorp) - https://developer.hashicorp.com/vault...
Crappy code, crappy Copilot. GitHub Copilot is writing vulnerable code and it could be your fault (GitGuardian) - https://blog.gitguardian.com/crappy-c...
trufflesecurity/trufflehog (GitHub) - https://github.com/trufflesecurity/tr...
gitleaks/gitleaks (GitHub) - https://github.com/gitleaks/gitleaks
Git (Wikipedia) - https://en.wikipedia.org/wiki/Git
awslabs/git-secrets (GitHub) - https://github.com/awslabs/git-secrets
85 bölüm
Manage episode 362236188 series 2568929
In this episode of the Forensic Focus podcast, Si and Desi talk to Mackenzie Jackson, Developer Advocate at Git Guardian.
Mackenzie discusses the problem of hard-coded and leaked credentials in Git repositories, the task of scanning Git repositories for leaked credentials, and how that’s helped by the setup of GitHub and Git.
He also looks at some public and private cases of security breaches through Git repositories and recommends tools you can use to combat attackers on Git.
Show Notes:
Toyota Suffered a Data Breach by Accidentally Exposing A Secret Key Publicly On GitHub (GitGuardian) - https://blog.gitguardian.com/toyota-a...
GitHub.com rotates its exposed private SSH key (Bleeping Computer) - https://www.bleepingcomputer.com/news...
Conpago - https://www.conpago.com.au/
Source Code as a Vulnerability - A Deep Dive into the Real Security Threats From the Twitch Leak (GitGuardian) - https://blog.gitguardian.com/security...
Teenagers Leveraging Insider Threats: Lapsus$ Hacker Group (Forbes) - https://www.forbes.com/sites/emilsaye...
Lapsus$: Oxford teen accused of being multi-millionaire cyber-criminal (BBC) - https://www.bbc.co.uk/news/technology...
Dynamic Secrets (HashiCorp) - https://developer.hashicorp.com/vault...
Crappy code, crappy Copilot. GitHub Copilot is writing vulnerable code and it could be your fault (GitGuardian) - https://blog.gitguardian.com/crappy-c...
trufflesecurity/trufflehog (GitHub) - https://github.com/trufflesecurity/tr...
gitleaks/gitleaks (GitHub) - https://github.com/gitleaks/gitleaks
Git (Wikipedia) - https://en.wikipedia.org/wiki/Git
awslabs/git-secrets (GitHub) - https://github.com/awslabs/git-secrets
85 bölüm
Tüm bölümler
×Player FM'e Hoş Geldiniz!
Player FM şu anda sizin için internetteki yüksek kalitedeki podcast'leri arıyor. En iyi podcast uygulaması ve Android, iPhone ve internet üzerinde çalışıyor. Aboneliklerinizi cihazlar arasında eş zamanlamak için üye olun.